CVE-2017-15588: Xen

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.

Affected products

• Xen Xen: version 4.9.0 only

Published 2017-10-18. Last modified 2026-06-17.