An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-ltsUpgrade xen | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Freebsd | — | Upgrade FreeBSD | Jan 30, 2021 | Jan 29, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade python-perfUpgrade kernel-uek-toolsUpgrade kernel-uek-develUpgrade kernel-uek-headersUpgrade kernel-uek-container-debugUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-tools-libsUpgrade perfUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-containerUpgrade kernel-uek-debug | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-5.4.0-66-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1088-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-136-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-dell300xUpgrade linux-image-azureUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.4.0-203-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-4.4.0-203-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1108-azureUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-203-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-203-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-203-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1094-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1146-raspi2Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-4.4.0-203-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-4.4.0-1086-awsUpgrade linux-image-4.4.0-203-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1150-snapdragonUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.4 | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub