Medium severity6.3NVD Advisory· Published Oct 7, 2016· Updated Jun 17, 2026
CVE-2016-7777
CVE-2016-7777
Description
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- osv-coords20 versionspkg:rpm/opensuse/xen&distro=openSUSE%20Tumbleweedpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/xen&distro=SUSE%20Manager%202.1pkg:rpm/suse/xen&distro=SUSE%20Manager%20Proxy%202.1pkg:rpm/suse/xen&distro=SUSE%20OpenStack%20Cloud%205
< 4.15.1_01-1.2+ 19 more
- (no CPE)range: < 4.15.1_01-1.2
- (no CPE)range: < 4.5.5_02-22.3.1
- (no CPE)range: < 4.7.1_02-25.1
- (no CPE)range: < 4.2.5_21-30.1
- (no CPE)range: < 4.1.6_08-32.1
- (no CPE)range: < 4.2.5_21-30.1
- (no CPE)range: < 4.4.4_10-43.5
- (no CPE)range: < 4.5.5_02-22.3.1
- (no CPE)range: < 4.7.1_02-25.1
- (no CPE)range: < 4.4.4_05-22.25.1
- (no CPE)range: < 4.4.4_10-43.5
- (no CPE)range: < 4.4.4_05-22.25.1
- (no CPE)range: < 4.5.5_02-22.3.1
- (no CPE)range: < 4.7.1_02-25.1
- (no CPE)range: < 4.4.4_10-43.5
- (no CPE)range: < 4.5.5_02-22.3.1
- (no CPE)range: < 4.7.1_02-25.1
- (no CPE)range: < 4.2.5_21-30.1
- (no CPE)range: < 4.2.5_21-30.1
- (no CPE)range: < 4.2.5_21-30.1
Patches
Vulnerability mechanics
References
5- xenbits.xen.org/xsa/advisory-190.htmlnvdMitigationPatchVendor Advisory
- www.securityfocus.com/bid/93344nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1036942nvdThird Party AdvisoryVDB Entry
- security.gentoo.org/glsa/201611-09nvd
- support.citrix.com/article/CTX217363nvd
News mentions
0No linked articles in our index yet.