CVE-2016-1570

Published: Jan 22, 2016Modified: May 6, 2026

8.5

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 6.0

Source: NVD

Description

The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.

Affected (30)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3
Xen Xen	Version 4.1.4
Xen Xen	Version 4.1.5
Xen Xen	Version 4.1.6.1
Xen Xen	Version 4.1.6
Xen Xen	Version 4.2.0
Xen Xen	Version 4.2.1
Xen Xen	Version 4.2.2
Xen Xen	Version 4.2.3
Xen Xen	Version 4.2.4
Xen Xen	Version 4.2.5
Xen Xen	Version 4.3.0
Xen Xen	Version 4.3.1
Xen Xen	Version 4.3.2
Xen Xen	Version 4.3.3
Xen Xen	Version 4.3.4
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.0 rc1
Xen Xen	Version 4.4.1
Xen Xen	Version 4.4.2
Xen Xen	Version 4.4.3
Xen Xen	Version 4.5.0
Xen Xen	Version 4.5.1
Xen Xen	Version 4.5.2
Xen Xen	Version 4.6.0