CVE-2017-7228

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x through 4.8.x

Description The issue is related to inadequate access control in the Xen hypervisor. It allows a local attacker to access hypervisor memory outside of the guest-provided input/output arrays due to insufficient checking of XENMEM exchange input, which was introduced by the earlier XSA-29 fix.

Recommendations For versions 4.4.x through 4.8.x, apply the available fixes to resolve the issue. As a temporary workaround, consider restricting access to the XENMEM exchange input to minimize the risk of exploitation.