CVE-2020-25598

Name of the Vulnerable Software and Affected Versions Xen versions 4.12 through 4.14.x

Description A missing unlock in the XENMEM acquire resource error path causes an RCU reference to be leaked. This can lead to a host Denial of Service when administration operations, such as CPU offline, livelock. The vulnerability can generally only be exploited by x86 HVM VMs, as these are the only type of VM that have a Qemu stubdomain. The side effects are believed to be benign on Xen versions 4.12 and 4.13.

Recommendations For Xen versions 4.12 through 4.14.x, apply the provided patches to resolve the issue. As a temporary workaround, consider restricting the use of HVM stubdomains to minimize the risk of exploitation.