CVE-2013-2195: The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions...

Security readout for executives and security teams

CVE-2013-2195 affects Xen's libelf handling for guest kernels in Xen 4.2.x and earlier. A local guest administrator with specific permissions could supply a crafted kernel and cause an unspecified security impact. The business concern is strongest for legacy Xen virtualization where tenants or delegated admins can control guest kernel boot inputs. Exposure is most likely in legacy Xen 4.2.x or earlier deployments, especially paravirtualized guest environments where local guest administrators can provide or modify guest kernels. Modern fully patched Xen platforms are less likely affected, but version and package backport status must be verified. Treat as a legacy virtualization risk requiring inventory-driven action. It is not documented as actively exploited in the supplied sources, but compromised hypervisor boundaries can carry high business impact in shared-host environments. Mitigation focus: Inventory Xen hosts and identify versions 4.2.x or earlier.; Apply Xen updates from the relevant vendor advisory or distribution package channel.; Review whether guest administrators can boot custom paravirtualized kernels..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.