tocsin

Debian/xen: critical 9.8

An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86

Action: Upgrade xen to 4.11.3+24-g14b62ab3e5-1 or later.

Affected

introducedfixedlast affected
04.11.3+24-g14b62ab3e5-1-

Fixed versions

4.11.3+24-g14b62ab3e5-1

Sources

published · modified · JSON