Lucene search

K
xenXen ProjectXSA-457
HistoryMay 07, 2024 - 5:11 p.m.

Linux/xen-netfront: Memory leak due to missing cleanup function

2024-05-0717:11:00
Xen Project
xenbits.xen.org
14
netfront
memory leak
cleanup function
guest crash
denial of service
xen pv
linux 5.9

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

ISSUE DESCRIPTION

In netfront, xennet_alloc_one_rx_buffer() failed to call the appropriate clean-up function, resulting in a memory leak.

IMPACT

A malicious guest userspace process can exhaust memory resources within the guest kernel, potentially leading to a guest crash (Denial of Service). It is not known whether it can be triggered remotely.

VULNERABLE SYSTEMS

Systems with guests running Linux 5.9 and later with Xen PV network devices are affected.

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%