CVE-2017-10921

Critical

Published: 05/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for GNTMAP_device_map and GNTMAP_host_map mapping, which may lead to denial of service or privileged host OS access.

Risk Assessment

Guest OS users can cause count mismanagement and memory corruption, posing risks to the stability and security of the host system.

Recommendation

It is recommended to upgrade to the latest version of Xen to mitigate this vulnerability and to monitor systems for potential exploitation attempts.

Original NVD description (English source)

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.