Xen "mov_to_rr" Security Bypass Vulnerability - Advisories - Secunia

Xenのにローカル権限をバイパスできる脆弱性が存在するそうです。IA64環境のみ見たいですけど・・・

A vulnerability has been reported in Xen, which can be exploited by malicious, local users to bypass certain security restrictions.
The vulnerability is caused due to Xen improperly checking RID (Region Identifier) values in calls to "mov_to_rr". This can be exploited by an attacker in a VT-i domain to read memory from another VT-i domain.
The vulnerability is reported in versions prior to 3.1.2 running on IA64 platforms.

---