Vulnerability in Xen

CVE-2012-5514

The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.

EPSS: 0.004 (33.7th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.0.2, 3.0.3, 3.0.4
  • N/a — versions n/a

References