CVE-2016-3158: Infoleak
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3158?
CVE-2016-3158 is considered to have a high severity level due to the potential for sensitive information exposure between guest OS instances.
How do I fix CVE-2016-3158?
To fix CVE-2016-3158, you should update Xen to a version later than 4.4.0 and ensure that your systems are running on patched versions from the relevant vendors.
Who is affected by CVE-2016-3158?
CVE-2016-3158 affects users of Xen 4.x and specific versions of Fedora and Oracle VM Server that are mentioned in the vulnerability identification.
What type of vulnerability is CVE-2016-3158?
CVE-2016-3158 is a local information disclosure vulnerability that can allow guest OS users to access sensitive register information from other guests.
Can CVE-2016-3158 be exploited remotely?
CVE-2016-3158 cannot be exploited remotely as it requires local access to the guest OS to leverage the vulnerability.