Description
Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:2.3+dfsg-5 | — |
| Debian 14 | xen | 4.4.0-1 | — |
| Debian 13 | qemu | 1:2.3+dfsg-5 | — |
| Debian 13 | xen | 4.4.0-1 | — |
| Debian 12 | qemu | 1:2.3+dfsg-5 | — |
| Debian 12 | xen | 4.4.0-1 | — |
| Debian 8 | qemu | 1:2.1+dfsg-12+deb8u1 | DSA-3284-1 |
| Debian 8 | xen | 4.4.1-9+deb8u1 | DSA-3286-1 |
| Debian 7 | xen | 4.1.4-3+deb7u8 | DSA-3286-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.13 | USN-2630-1 |
| Ubuntu 14.04 LTS | xen | 4.4.2-0ubuntu0.14.04.2 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | xen | 4.4.2_06-21.1 | SUSE-SU-2015:1042-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 | xen | 4.4.2_06-21.1 | SUSE-SU-2015:1042-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 | openSUSE-SU-2024:10196-1 |
Advisories 5
- DSA-3284-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3286-1 xen - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2630-1 qemu, qemu-kvm vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2015:1042-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10196-1 xen-4.7.0_12-1.3 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- USN-2630-1 vendor-advisory
- https://support.citrix.com/article/CTX206006
- DSA-3286 vendor-advisory
- SUSE-SU-2015:1156 vendor-advisory
- FEDORA-2015-9466 vendor-advisory
- DSA-3284 vendor-advisory
- 1032456 vdb-entry
- SUSE-SU-2015:1157 vendor-advisory
- http://support.citrix.com/article/CTX201145
- SUSE-SU-2015:1045 vendor-advisory
- 74947 vdb-entry
- http://xenbits.xen.org/xsa/advisory-128.html
- GLSA-201604-03 vendor-advisory
- FEDORA-2015-9456 vendor-advisory
- SUSE-SU-2015:1042 vendor-advisory
- FEDORA-2015-9965 vendor-advisory