Lucene search

K
xenXen ProjectXSA-45
HistoryMay 02, 2013 - 12:00 p.m.

Several long latency operations are not preemptible

2013-05-0212:00:00
Xen Project
xenbits.xen.org
30

0.001 Low

EPSS

Percentile

26.1%

ISSUE DESCRIPTION

Page table manipulation operations for PV guests can take significant amounts of time, as they require all present branches to have their type (and thus contents) verified. While the most frequently used operations had been made preemptible in the past, some code paths involving potentially deep page table traversal were still trying to do their entire work in a single step.

IMPACT

Malicious or buggy PV guest kernels can mount a denial of service attack affecting the whole system.

VULNERABLE SYSTEMS

All Xen versions are vulnerable.
The vulnerability is only exposed by PV guests.

CPENameOperatorVersion
xeneqany