Juergen Gross

The issue arises in the Linux kernel when the `xenvif rx next skb()` function is called with an empty rx queue. This can occur if the loop in `xenvif rx action()` performs multiple iterations without checking the availability of another skb in the rx queue, leading to crashes due to a NULL pointer dereference. The problem is resolved by stopping the loop when the rx queue becomes empty.

The issue is related to a component of the Xen hypervisor, specifically the blkfront component, which has a resource release error. This can be exploited by a remote attacker to cause a denial of service.