GHSA-mrv5-xm7c-h532

GHSA-mrv5-xm7c-h532 PUBLISHED CVSS 8.399999618530273 HIGH

Record from GitHub Advisory Database · Published May 17, 2022

The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.

Risk scores

CVSS 3.0

8.399999618530273

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Timeline

May 17, 2022 CVE Published
Apr 9, 2026 Security Advisory
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-mrv5-xm7c-h532
vulnetix vdb fixes GHSA-mrv5-xm7c-h532

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-mrv5-xm7c-h532/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →