CVE-2014-4022

The CVE-2014-4022 entry concerns Xen 4.4.x on ARM where alloc_domain_struct in arch/arm/domain.c fails to properly initialize the grant-table pages structure for a domain. This causes an information leak via the GNTTABOP_setup_table subhypercall, allowing a malicious guest administrator to read u...