CVE-2017-15589

CVE-2017-15589 is a medium-severity information disclosure vulnerability affecting Xen through version 4.9.x, allowing x86 HVM guest OS users to read sensitive data from the host or other guest OSes. This occurs due to intercepted I/O operations causing uninitialized hypervisor stack memory to be written. The attack requires local access and low privileges, with a high impact on confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat level.