Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2011-1898

25
FAUCET Score

CVE-2011-1898 is a privilege escalation vulnerability affecting Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, specifically when PCI passthrough is used on Intel VT-d chipsets lacking interrupt remapping. A guest OS user can exploit this by using DMA to generate MSI interrupts, thereby gaining host OS privileges. Rated with a CVSS score of 7.4, this vulnerability has a high impact on confidentiality, integrity, and availability, requiring authenticated access and medium attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
4.0.0CPE matchmatch criteria
cpe:2.3:a:citrix:xen:4.0.0:*:*:*:*:*:*:*
4.0.1CPE matchmatch criteria
cpe:2.3:a:citrix:xen:4.0.1:*:*:*:*:*:*:*
4.1.0CPE matchmatch criteria
cpe:2.3:a:citrix:xen:4.1.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.4HIGH

AV:A/AC:M/Au:S/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Exploitability Score
4.4
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.85%
Probability of exploitation in next 30 days
EPSS Percentile
54.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0085 is in the 75th percentile among its peer group of 45 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel-0:2.6.18-274.12.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.6 EUS - Server OnlyFixed in: kernel-0:2.6.18-238.35.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel-0:2.6.32-131.12.1.el6
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kvm
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux Extended Update Support 5.7Fixed in: kernel-xen

Vendor Advisories (1)

redhatCVE-2011-1898Important

virt: VT-d (PCI passthrough) MSI trap injection

Apr 13, 2011

References

lists.fedoraproject.org / pipermail/package-announce/2011-June/062112.html
lists.fedoraproject.org / pipermail/package-announce/2011-June/062139.html
lists.opensuse.org / opensuse-security-announce/2011-08/msg00017.html
lists.opensuse.org / opensuse-security-announce/2011-08/msg00018.html
theinvisiblethings.blogspot.com / 2011/05/following-white-rabbit-software-attacks.html
invisiblethingslab.com / resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf
Exploit
xen.1045712.n5.nabble.com / Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html
xen.org / download/index_4.0.2.html
Patch