CVE-2016-10025: Null Pointer Dereference
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10025?
CVE-2016-10025 has a severity rating that indicates it can lead to a denial of service through a hypervisor crash.
How do I fix CVE-2016-10025?
To fix CVE-2016-10025, you should upgrade to a version of Xen that is not affected, such as Xen 4.8.1 or later.
What systems are affected by CVE-2016-10025?
CVE-2016-10025 affects Xen versions 4.6.x to 4.8.x on x86 systems using AMD virtualization extensions.
Can CVE-2016-10025 be exploited remotely?
CVE-2016-10025 requires local access to the HVM guest OS, making it a local privilege escalation issue rather than a remote exploit.
What impact does CVE-2016-10025 have on the hypervisor?
The impact of CVE-2016-10025 is a denial of service, causing the hypervisor to crash.