Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernelUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-doc | Dec 1, 2016 | Dec 13, 2012 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Dec 13, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 13, 2012 |
| Suse | — | Upgrade xen-kmp-kdumpUpgrade xen-kmp-bigsmpUpgrade xen-doc-pdfUpgrade xen-develUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade xen-kmp-vmipaeUpgrade xen-kmp-smpUpgrade xen-doc-htmlUpgrade xen-kmp-kdumppaeUpgrade xenUpgrade xen-kmp-debugUpgrade xen-tools-ioemuUpgrade xen-doc-psUpgrade xen-kmp-vmiUpgrade xen-tools-domUUpgrade xen-kmp-default | Feb 17, 2015 | Dec 13, 2012 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Dec 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub