CVE-2017-10915

Critical

Published: 05/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The shadow-paging feature in Xen through 4.8.x mismanages page references, leading to a race condition. This allows guest OS users to obtain Xen privileges, known as XSA-219.

Risk Assessment

Organizations may be exposed to unauthorized access to Xen privileges, potentially leading to serious security breaches and loss of control over the system.

Recommendation

It is recommended to upgrade to the latest version of Xen to mitigate this vulnerability and to monitor systems for potential exploitation attempts.

Original NVD description (English source)

The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.