Launchpad.net

CVE 2017-12135

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.

See the CVE page on Mitre.org for more details.