CVE-2017-10915 Race condition in n/a

Critical 9.0 Published 5 Jul 2017 Updated 5 Aug 2024

Guest OS users can exploit a race condition in Xen's shadow-paging to gain Xen hypervisor privileges.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2017-10915?

CVE-2017-10915 is a critical vulnerability in Xen Xen, published on 5 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.

Weakness: CWE-362

Which versions are affected by CVE-2017-10915?

It affects 1 product.

Products include Xen Xen.

How do I fix CVE-2017-10915?

Apply the vendor's patch.

Is CVE-2017-10915 being exploited?

There is no known exploitation of CVE-2017-10915 in the wild and no public exploit code.

All Xen Xen vulnerabilities

Sources

Also known as ALPINE-CVE-2017-10915, DEBIAN-CVE-2017-10915, GHSA-j89r-h362-8fxj, UBUNTU-CVE-2017-10915.