Description
The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-26lenny2 | DSA-2153-1 |
| Debian 5.0 | user-mode-linux | 2.6.26-1um-2+26lenny2 | DSA-2153-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-194.32.1.el5 | RHSA-2011:0004 |
Advisories 2
- RHSA-2011:0004 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2153-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
References
- 42789 third-party-advisory
- 43056 third-party-advisory
- ADV-2011-0024 vdb-entry
- RHSA-2011:0004 vendor-advisory
- 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console mailing-list
- 46397 third-party-advisory
- 1024786 vdb-entry
- SUSE-SA:2011:005 vendor-advisory
- 42372 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
- http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/59f097ef181b
- 45039 vdb-entry
- ADV-2011-0213 vdb-entry