An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device.
https://xenbits.xen.org/xsa/advisory-285.html
https://www.debian.org/security/2020/dsa-4602
https://seclists.org/bugtraq/2020/Jan/21