Xen 4.6.x and earlier allows local guest administrators cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.