CVE-2017-10913: Xen

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.

Affected products

• Xen Xen: up to and including 4.8.1

Published 2017-07-05. Last modified 2026-06-17.