Description
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-92.1.18.el5 | RHSA-2008:0957 |
Advisories 1
- RHSA-2008:0957 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- 32485 third-party-advisory
- oval:org.mitre.oval:def:10380 vdb-entry signature
- 28412 third-party-advisory
- SUSE-SR:2008:002 vendor-advisory
- RHSA-2008:0957 vendor-advisory
- 28405 third-party-advisory
- 27219 vdb-entry
- [Xen-devel] 20071029 [PATCH] x86: allow pv guests to disable TSC for applications mailing-list
- 28636 third-party-advisory
- SUSE-SR:2008:001 vendor-advisory