CVE-2009-1758
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2...
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
Exploit likelihood
What each source reports
NVD Score used
5.0
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
- Record
CVE-2009-1758- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
- Record
CVE-2009-1758- Updated
- 2026-11-02
EUVDEUVD-2009-1753 No score
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
- Record
EUVD-2009-1753- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjvg-f232-r4p7 No score
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2...
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
- Record
GHSA-qjvg-f232-r4p7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
user-mode-linuxDebian:5.0 From an advisory covering 4 CVEs |
before 2.6.26-1um-2+15lenny3, plus listed versions 2.6.26-1um-22.6.26-1um-2+152.6.26-1um-2+15lenny2 |
2.6.26-1um-2+15lenny3 |
linux-2.6Debian:5.0 From an advisory covering 4 CVEs |
before 2.6.26-15lenny3, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15 Show 4 moreShow less2.6.26-15lenny12.6.26-15lenny22.6.26-15~bpo40+12.6.26-15~bpo40+2 |
2.6.26-15lenny3 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-128.1.14.el5 | 0:2.6.18-128.1.14.el5 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:2.6.9-89.0.3.EL | 0:2.6.9-89.0.3.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1758 is a medium vulnerability (CVSS 5.0) in Xen, published May 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.16%, the 82nd percentile. No source names a fixed version.
References
secunia.com/advisories/35093
openwall.com/lists/oss-security/2009/05/14/2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313
secunia.com/advisories/35298
securityfocus.com/bid/34957
lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html
Show 57 moreShow less
debian.org/security/2009/dsa-1809
nvd.nist.gov/vuln/detail/CVE-2009-1758
github.com/advisories/GHSA-qjvg-f232-r4p7
access.redhat.com/errata/RHSA-2009:1106
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=486921
bugzilla.redhat.com/show_bug.cgi?id=486926
bugzilla.redhat.com/show_bug.cgi?id=502916
bugzilla.redhat.com/show_bug.cgi?id=486945
bugzilla.redhat.com/show_bug.cgi?id=491572
bugzilla.redhat.com/show_bug.cgi?id=494275
bugzilla.redhat.com/show_bug.cgi?id=496572
bugzilla.redhat.com/show_bug.cgi?id=497020
bugzilla.redhat.com/show_bug.cgi?id=497322
bugzilla.redhat.com/show_bug.cgi?id=498653
bugzilla.redhat.com/show_bug.cgi?id=499546
bugzilla.redhat.com/show_bug.cgi?id=500120
bugzilla.redhat.com/show_bug.cgi?id=500297
bugzilla.redhat.com/show_bug.cgi?id=500349
bugzilla.redhat.com/show_bug.cgi?id=500945
bugzilla.redhat.com/show_bug.cgi?id=501742
bugzilla.redhat.com/show_bug.cgi?id=501751
bugzilla.redhat.com/show_bug.cgi?id=502837
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1106.json
access.redhat.com/security/cve/CVE-2009-1072
cve.org/CVERecord?id=CVE-2009-1072
nvd.nist.gov/vuln/detail/CVE-2009-1072
access.redhat.com/security/cve/CVE-2009-1192
cve.org/CVERecord?id=CVE-2009-1192
nvd.nist.gov/vuln/detail/CVE-2009-1192
access.redhat.com/security/cve/CVE-2009-1439
cve.org/CVERecord?id=CVE-2009-1439
nvd.nist.gov/vuln/detail/CVE-2009-1439
access.redhat.com/security/cve/CVE-2009-1630
cve.org/CVERecord?id=CVE-2009-1630
nvd.nist.gov/vuln/detail/CVE-2009-1630
access.redhat.com/security/cve/CVE-2009-1633
cve.org/CVERecord?id=CVE-2009-1633
nvd.nist.gov/vuln/detail/CVE-2009-1633
access.redhat.com/security/cve/CVE-2009-1758
cve.org/CVERecord?id=CVE-2009-1758
access.redhat.com/security/cve/CVE-2009-3238
bugzilla.redhat.com/show_bug.cgi?id=524512
cve.org/CVERecord?id=CVE-2009-3238
nvd.nist.gov/vuln/detail/CVE-2009-3238
access.redhat.com/errata/RHSA-2009:1132
bugzilla.redhat.com/show_bug.cgi?id=499549
bugzilla.redhat.com/show_bug.cgi?id=501754
bugzilla.redhat.com/show_bug.cgi?id=501800
bugzilla.redhat.com/show_bug.cgi?id=501802
bugzilla.redhat.com/show_bug.cgi?id=501804
bugzilla.redhat.com/show_bug.cgi?id=502981
bugzilla.redhat.com/show_bug.cgi?id=504565
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1132.json
access.redhat.com/security/cve/CVE-2009-1385
cve.org/CVERecord?id=CVE-2009-1385
nvd.nist.gov/vuln/detail/CVE-2009-1385