TI-2010-03988 Aliases CVE-2010-4238 GHSA-q68m-xchw-w886

The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise…

LOW 27CWE-264Published 2011-01-22 · Updated 2024-08-07

Key facts

Attack vector: Adjacent network
Privileges required: Low
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · None · Complete
Fix status: Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic) via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these details are obtained from third party information.

Why it matters now

EPSS 0.00891 59th percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD

Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:citrix:xen:3.1.2:::::::*	3.1.2	Vulnerable	Citrix
cpe:2.3:o:linux:linux_kernel:2.6.18:::::::*	2.6.18	Running on	Linux
cpe:2.3:o:redhat:enterprise_linux:5:::::::*	5	Running on	Red Hat

cpe:2.3:a:citrix:xen:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Citrix
cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* Versions 2.6.18 Running on ·Linux
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Versions 5 Running on ·Red Hat

Remediation

Red Hat 1 advisory

RHSA-2011:0017 Released 2011-01-13 · Red Hat rating Important
Red Hat Enterprise Linux 5.6 kernel security and bug fix update
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-238.el5, kernel-2.6.18-238.el5.ia64, kernel-PAE-2.6.18-238.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-238.el5, kernel-PAE-2.6.18-238.el5, kernel-PAE-devel-2.6.18-238.el5 +8

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux (v. 5 server)	Fixed	RHSA-2011:0017
Red Hat Enterprise Linux Desktop (v. 5 client)	Fixed	RHSA-2011:0017

Timeline

2026-10-02 Threatist record created from CVE-2010-4238
2026-10-03 Alias added: GHSA-q68m-xchw-w886

References

Exploit 2

Advisory 1

RHSA-2011:0017

Other 1

http://www.vmware.com/security/advisories/VMSA-2011-0012.html

TI-2011-01674 Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d… CVSS 2.0HIGH 7.4
TI-2008-04202 xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore… CVSS 2.0HIGH 7.2
TI-2011-01402 Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0… CVSS 2.0MEDIUM 6.9
TI-2008-05424 xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the… CVSS 2.0HIGH 7.2
TI-2010-04004 The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit… CVSS 2.0MEDIUM 6.1
TI-2010-03996 The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2)… CVSS 2.0MEDIUM 5.5

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences