UBUNTU-CVE-2016-5242

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2016-5242
Published: 07 Jun 2016, 14:06
Last modified:22 Apr 2026, 10:49

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.6 MEDIUM
3.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

07 Jun 2016, 14:06
Published
Vulnerability first disclosed
22 Apr 2026, 10:49
Last Modified
Vulnerability information updated

Description

The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.6CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected Systems

  • ubuntu•xen

    < 4.4.2-0ubuntu0.14.04.6 | < 4.6.0-1ubuntu4.1

References (3)