Design/Logic Flaw

The modl2entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping...

CVE-2015-7835

The modl2entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping...

CVE-2015-7835

CVE-2015-7835 affects Xen 3.4 through 4.6.x. The vulnerability lies in the mod_l2_entry function in arch/x86/mm.c, which does not properly validate level 2 page table entries. This can allow local PV guest administrators to gain privileges via a crafted superpage mapping (privilege escalation). N...