This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-9932 →

DEBIAN-CVE-2016-9932

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory v...

Original description

The description as published by the source.

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0~rc3-1"}]}]

Debian:13 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0~rc3-1"}]}]

Debian:14 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0~rc3-1"}]}]

References

advisory security-tracker.debian.org