Description
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | xen | 4.15.1_01-1.2 | openSUSE-SU-2024:11520-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | xen | 4.10.0-r1 | — |
| Alpine v3.23 | xen | 4.10.0-r1 | — |
| Alpine v3.22 | xen | 4.10.0-r1 | — |
| Alpine v3.21 | xen | 4.10.0-r1 | — |
| Alpine v3.20 | xen | 4.10.0-r1 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | xen | 4.10.0-r1 | — |
| Alpine v3.18 | xen | 4.10.0-r1 | — |
| Alpine v3.17 | xen | 4.10.0-r1 | — |
| Alpine v3.16 | xen | 4.10.0-r1 | — |
| Alpine v3.15 | xen | 4.10.0-r1 | — |
Advisories 1
- openSUSE-SU-2024:11520-1 xen-4.15.1_01-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- GLSA-201810-06 vendor-advisory
- 102433 vdb-entry
- 1040774 vdb-entry
- https://xenbits.xen.org/xsa/advisory-253.html