From the patch: > While the write path change appears to be purely cosmetic (but still gets done here for consistency), the read side mistake permitted accesse

From the patch: > While the write path change appears to be purely cosmetic (but still gets done here for consistency), the read side mistake permitted accesses beyond the virtual APIC page. http://xenbits.xen.org/xsa/xsa108.patch http://xenbits.xen.org/xsa/xsa108.patch