CVE-2014-1666

CVE-2014-1666 describes a privilege escalation and denial-of-service vulnerability affecting Xen versions 4.1.5, 4.1.6.1, 4.2.2-4.2.3, and 4.3.x. The flaw lies in the do_physdev_op function's insufficient access restrictions for PHYSDEVOP_prepare_msix and PHYSDEVOP_release_msix operations. This allows local PV guests to trigger a host or guest malfunction, or potentially gain elevated privileges. With a CVSS score of 8.3 (AV:A/AC:L/Au:N/C:C/I:C/A:C), it represents a high-severity risk with low attack complexity and significant potential impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.