An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-lts | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Freebsd | — | Upgrade FreeBSD | Jan 30, 2021 | Jan 29, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-docUpgrade perfUpgrade kernel-uek-tools-libsUpgrade kernel-uek-debugUpgrade kernel-uek-containerUpgrade kernel-uek-tools-libs-develUpgrade kernel-uekUpgrade kernel-uek-firmwareUpgrade python-perfUpgrade kernel-uek-container-debugUpgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-toolsUpgrade kernel-uek-headers | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-203-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-203-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1086-awsUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-203-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-4.4.0-203-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-203-powerpc-e500mcUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1146-raspi2Upgrade linux-image-4.4.0-1150-snapdragonUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1038-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1088-kvmUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-snapdragonUpgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-203-powerpc-smpUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-203-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-gkeopUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-kvm | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub