CVE-2016-1571

State: Published
Severity: Not scored
Published: Jan 22, 2016
Updated: Aug 5, 2024
Reserved: Jan 11, 2016

Description

The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

DSA-3519vendor-advisory
1034745vdb-entry
http://support.citrix.com/article/CTX205496
http://xenbits.xen.org/xsa/advisory-168.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.