CVE-2017-10911

The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from…

published July 5, 2017

CVSS
—
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00462 · 39.1th percentile
Published
2017-07-05T01:00Z
EPSS history
Timeline
  • 05 JUL 01:00Z
    The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from…
    cvelistv5