{"action":"Upgrade xen to 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6 or later.","affected":[{"fixed":"4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"],"id":"tcs_01M5NDJK9DF5PW11C611JWEX6Z","modified_at":"2026-10-23T18:03:10.036606901Z","published_at":"2018-05-08T18:29:00.547Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-8897","https://security-tracker.debian.org/tracker/CVE-2018-8897"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-8897#Debian:12/xen","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-8897"}],"summary":"A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulti"}