The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service ("scheduling while atomic" error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 15, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-27-lowlatencyUpgrade linux-image-3.13.0-27-powerpc-e500mcUpgrade linux-image-3.13.0-27-genericUpgrade linux-image-3.13.0-27-generic-lpaeUpgrade linux-image-3.13.0-30-genericUpgrade linux-image-3.13.0-27-powerpc64-embUpgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.13.0-27-powerpc-e500Upgrade linux-image-3.13.0-27-powerpc64-smpUpgrade linux-image-3.13.0-27-powerpc-smp | Nov 8, 2024 | Apr 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub