Jan H. Schönherr

The issue is related to errors in mapping grant references provided by the frontend in the Linux kernel's Xen driver. This can lead to the caller assuming successful mapping and attempting to access unmapped space, or internal state not being updated sufficiently to prevent safe recovery from errors. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue is related to the `xen biovec phys mergeable` function in the `biomerge.c` driver, which has inadequate access control to certain functions. This can be exploited by a local attacker to elevate privileges, damage block device data streams, breach confidentiality, and cause a denial of service by leveraging incorrect block IO merge-ability calculation.