Critical severity10.0NVD Advisory· Published Jul 5, 2017· Updated Jun 17, 2026

CVE-2017-10920

Description

The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xen/Xen2 versions
cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*range: <=4.8.1
- (no CPE)range: <=4.8.x
osv-coords5 versions
pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/xen&distro=SUSE%20OpenStack%20Cloud%206
< 4.5.5_12-22.18.1+ 4 more
- (no CPE)range: < 4.5.5_12-22.18.1
- (no CPE)range: < 4.4.4_21-22.42.1
- (no CPE)range: < 4.4.4_21-22.42.1
- (no CPE)range: < 4.5.5_12-22.18.1
- (no CPE)range: < 4.5.5_12-22.18.1

Patches

Vulnerability mechanics

References

xenbits.xen.org/xsa/advisory-224.htmlnvdPatchVendor Advisory
www.debian.org/security/2017/dsa-3969nvd
www.securitytracker.com/id/1038734nvd
security.gentoo.org/glsa/201708-03nvd
security.gentoo.org/glsa/201710-17nvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000