This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-9381 →

DEBIAN-CVE-2016-9381

Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double...

Original description

The description as published by the source.

Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1"}]}]

Debian:13 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1"}]}]

Debian:14 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1"}]}]

References

advisory security-tracker.debian.org