CVE-2016-3961

Name of the Vulnerable Software and Affected Versions Xen and the Linux kernel versions prior to 4.6

Description The issue arises from insufficient input validation in the Xen hypervisor, allowing a local attacker to cause a denial of service by attempting to access a hugetlbfs mapped area, resulting in a guest OS crash.

Recommendations For Xen and Linux kernel versions prior to 4.6, update to a version that properly suppresses hugetlbfs support in x86 PV guests to prevent the denial of service.