Candidate: CVE-2016-5242 PublicDate: 2016-06-07 14:06:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5242 http://xenbits.xen.org/xsa/advisory-181.html Description: The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H [5.6 MEDIUM] Patches_xen: Tags_xen: universe-binary upstream_xen: needs-triage precise_xen: not-affected trusty_xen: released (4.4.2-0ubuntu0.14.04.6) trusty/esm_xen: DNE (trusty was released [4.4.2-0ubuntu0.14.04.6]) vivid/ubuntu-core_xen: DNE vivid/stable-phone-overlay_xen: DNE wily_xen: released (4.5.1-0ubuntu1.4) xenial_xen: released (4.6.0-1ubuntu4.1) esm-infra/xenial_xen: released (4.6.0-1ubuntu4.1) devel_xen: released (4.6.0-1ubuntu5)