CVE-2020-29570

MEDIUM

Xen 4.4.0-4.13.x - Denial of Service via Per-vCPU Control Block Mapping

Title source: llm
STIX 2.1

Description

An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system.

References (6)

Core 6
Core References
Patch, Vendor Advisory x_refsource_misc
https://xenbits.xenproject.org/xsa/advisory-358.html
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2020/dsa-4812
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/12/16/4
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202107-30

Scores

CVSS v3 6.2
EPSS 0.0006
EPSS Percentile 18.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-770
Status published
Products (4)
debian/debian_linux 10.0
fedoraproject/fedora 32
fedoraproject/fedora 33
xen/xen 4.4.0 - 4.14.0
Published Dec 15, 2020
Tracked Since Feb 18, 2026