Vulnerability in Xen

CVE-2014-6268

The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU.

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.4.0, 4.4.1
  • N/a — versions n/a

Weakness classification (CWE)

References