CVE-2017-10920
CriticalSummary
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, which can lead to count mismanagement and memory corruption. Guest OS users can cause a denial of service or gain privileged host OS access.
Risk Assessment
The organization may experience denial of service or unauthorized access to the host operating system, potentially leading to serious security implications.
Recommendation
It is recommended to upgrade to the latest version of Xen to mitigate this vulnerability and to monitor systems for potential exploitation attempts.
Original NVD description (English source)
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.