Description
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xen | 4.3.0-1 | — |
| Debian 13 | xen | 4.3.0-1 | — |
| Debian 12 | xen | 4.3.0-1 | — |
| Debian 7 | xen | 4.1.6.lts1-8 | DLA-964-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP3 | xen | 4.2.5_21-41.1 | SUSE-SU-2017:1146-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 5 | xen | 4.2.5_21-41.1 | SUSE-SU-2017:1146-1 |
| SUSE Manager Proxy 2.1 | xen | 4.2.5_21-41.1 | SUSE-SU-2017:1146-1 |
| SUSE Manager 2.1 | xen | 4.2.5_21-41.1 | SUSE-SU-2017:1146-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xen | 4.2.5_21-41.1 | SUSE-SU-2017:1146-1 |
Advisories 2
- DLA-964-1 xen - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2017:1146-1 Security update for xen SUSE / openSUSE Security Updates · May 2, 2025