Candidate: CVE-2015-7835 PublicDate: 2015-10-30 15:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7835 http://xenbits.xen.org/xsa/advisory-148.html Description: The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: 栾尚聪 Assigned-to: CVSS: Patches_xen: Tags_xen: universe-binary upstream_xen: needs-triage precise_xen: released (4.1.6.1-0ubuntu0.12.04.7) trusty_xen: released (4.4.2-0ubuntu0.14.04.3) trusty/esm_xen: DNE (trusty was released [4.4.2-0ubuntu0.14.04.3]) vivid_xen: released (4.5.0-1ubuntu4.3) wily_xen: released (4.5.1-0ubuntu1.1) devel_xen: released (4.5.1-0ubuntu2)