CVE-2017-10923

Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-225. Mitigation On systems where the guest kernel is controlled by the host rather than guest administrator, running only kernels...