CVE-2014-7156: Xen

Low severity, CVSS 3.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor mode permissions for instructions that generate software interrupts, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors.

Affected products

• Xen Xen: version 3.3.0 only; version 3.3.1 only; version 3.3.2 only; version 4.1.0 only; version 4.1.1 only; version 4.1.2 only; …

Published 2014-10-02. Last modified 2026-06-17.