CVE-2011-1936
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not...
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
- Record
CVE-2011-1936- CVSS 2.0
- 4.6 Medium
AV:A/AC:H/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
- Record
CVE-2011-1936- Updated
- 2026-11-02
EUVDEUVD-2011-1934 No score
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
- Record
EUVD-2011-1934- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-36h3-x748-qfw8 No score
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not...
Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
- Record
GHSA-36h3-x748-qfw8- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 0:2.6.18-238.19.1.el5 | 0:2.6.18-238.19.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1936 is a medium vulnerability (CVSS 4.6) in Xen, published January 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2011-0927.html
openwall.com/lists/oss-security/2011/07/07/3
nvd.nist.gov/vuln/detail/CVE-2011-1936
github.com/advisories/GHSA-36h3-x748-qfw8
access.redhat.com/errata/RHSA-2011:0927
Show 62 moreShow less
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.6_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=653648
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0927.json
cve.org/CVERecord?id=CVE-2010-4649