Description
The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-53.1.19.el5 | RHSA-2008:0233 |
Advisories 1
- RHSA-2008:0233 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=437770
- xen-ssmiemulation-dos(41633) vdb-entry
- oval:org.mitre.oval:def:10226 vdb-entry signature
- 30116 third-party-advisory
- RHSA-2008:0233 vendor-advisory
- 29085 vdb-entry