Description
Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.
References (10)
Core 10
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/61501
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-3041
Patch, Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-104.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/61890
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201412-42.xml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030887
Scores
EPSS
0.0073
EPSS Percentile
72.8%
Details
CWE
CWE-362
Status
published
Products (20)
debian/debian_linux
7.0
fedoraproject/fedora
19
fedoraproject/fedora
20
opensuse/opensuse
12.3
opensuse/opensuse
13.1
xen/xen
4.1.0
xen/xen
4.1.1
xen/xen
4.1.2
xen/xen
4.1.3
xen/xen
4.1.4
... and 10 more
Published
Oct 02, 2014
Tracked Since
Feb 18, 2026