cvedb.io
CVE-2016-4480
HIGH · CVSS 8.4
EPSS exploitation probability: 0%
Published 2016-05-18T14:59:05.413 · Last modified 2026-06-17T00:47:38.170

Summary

The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.

Affected products

oracle — vm_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when oracle ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.