VULNERABILITY INTELLIGENCE

CVE-2018-19961

CVSS score7.8 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2018-12-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.

Weakness classification

  • CWE-459: Incomplete Cleanup

Primary references