CVE-2016-10025

Priority
Description
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD
virtualization extensions (aka SVM) allows local HVM guest OS users to
cause a denial of service (hypervisor crash) by leveraging a missing NULL
pointer check.
Notes
mdeslaurThis is XSA-203
Package
Source: xen (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was not-affected)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected)
Ubuntu 16.04 LTS (Xenial Xerus):released (4.6.0-1ubuntu4.3)
Patches:
Upstream:https://xenbits.xen.org/xsa/xsa203.patch
Upstream:https://xenbits.xen.org/xsa/xsa203-4.7.patch
Upstream:https://xenbits.xen.org/xsa/xsa203-4.8.patch
Binaries built from this source package are in universe and so are supported by the community. For more details see https://wiki.ubuntu.com/SecurityTeam/FAQ#Official_Support
More Information

Updated: 2020-09-10 04:58:06 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)