CVE-2013-3495: The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial...

Security readout for executives and security teams

CVE-2013-3495 is a Xen hypervisor denial-of-service flaw. A malicious or faulty local guest with access to a suitable PCI device could trigger a host kernel panic, potentially disrupting all workloads on that Xen host. Urgency is highest for older Xen environments using Intel VT-d and PCI passthrough. Exposure is likely limited to legacy Xen hosts running versions 3.3.x through 4.3.x with Intel VT-d interrupt remapping and PCI devices assigned to guests. Environments without PCI passthrough or not using affected Xen versions are less likely to be exposed. Treat as a high-priority infrastructure reliability risk for legacy Xen virtualization. A single guest could crash the host under specific passthrough conditions, causing multi-tenant or production outage. Focus remediation on exposed hypervisors first. Mitigation focus: Apply Xen or distribution updates referenced by Xen Security Advisory 59 and vendor advisories.; Prioritize hosts using Intel VT-d and PCI passthrough to untrusted guests.; Restrict or disable risky PCI passthrough until vendor-approved fixes are applied..

Prepared

Jun 14, 2026, 16:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.