Description
Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possibly have other impacts via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xen | 4.1.4-3 | — |
| Debian 13 | xen | 4.1.4-3 | — |
| Debian 12 | xen | 4.1.4-3 | — |
| Debian 7 | xen | 4.1.4-3+deb7u1 | DSA-2666-1 |
| Debian 6.0 | xen | 4.0.1-5.11 | DSA-2666-1 |
Advisories 1
- DSA-2666-1 xen - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- 59293 vdb-entry
- 55082 third-party-advisory
- [oss-security] 20130418 Xen Security Advisory 50 (CVE-2013-1964) - grant table hypercall acquire/release imbalance mailing-list
- GLSA-201309-24 vendor-advisory
- DSA-2666 vendor-advisory
- 1028459 vdb-entry
- SUSE-SU-2014:0446 vendor-advisory
- FEDORA-2013-6723 vendor-advisory