CVE-2014-7188: Xen

High severity, CVSS 8.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial of service (host crash) or read data from the hypervisor or other guests via unspecified vectors.

Affected products

• Xen Xen: version 4.1.0 only; version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.4 only; version 4.1.5 only; …

Published 2014-10-02. Last modified 2026-06-17.