Description
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.debian.org/security/2012/dsa-2531 ↗
- http://secunia.com/advisories/55082 ↗
- http://www.openwall.com/lists/oss-security/2012/08/09/3 ↗
- http://security.gentoo.org/glsa/glsa-201309-24.xml ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html ↗
- http://www.securityfocus.com/bid/54942 ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html ↗
- http://lists.xen.org/archives/html/xen-devel/2012-08/msg00855.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html ↗