Description
Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-92.el5 | RHBA-2008:0314 |
Advisories 1
- RHBA-2008:0314 Red Hat Bug Fix Advisory: Updated kernel packages for Red Hat Enterprise Linux 5.2 Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 28412 third-party-advisory
- SUSE-SR:2008:002 vendor-advisory
- [Xen-devel] 20071031 [PATCH, fixed] x86: fix debug register handling mailing-list
- 28405 third-party-advisory
- 27219 vdb-entry
- 28636 third-party-advisory
- SUSE-SR:2008:001 vendor-advisory