This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-10025 →

DEBIAN-CVE-2016-10025

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a de...

Original description

The description as published by the source.

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-1"}]}]

Debian:13 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-1"}]}]

Debian:14 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-1"}]}]

References

advisory security-tracker.debian.org