M. Vefa Bicakci

The issue is related to a lack of privilege management mechanism in the Xen hypervisor on x86 Intel systems. Exploitation of this issue may allow an attacker to access confidential data, compromise its integrity, and cause a denial of service. The problem occurs because a backport missed a flush, resulting in incorrect IOMMU updates, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access.

An issue in the Linux kernel and Xen hypervisor allows local users to cause a denial of service or possibly gain privileges. The `xen failsafe callback` entry point does not properly maintain the `RBX` register, leading to uninitialized memory usage and system crash. Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash. The vulnerability is related to insufficient access control in the `xen failsafe callback` function.

The issue is related to a use-after-free error in the `ucma leave multicast` function, allowing attackers to cause a denial of service. This occurs because the function accesses a certain data structure after a cleanup step in `ucma process join`. The exploitation of this issue may lead to a service disruption.