PT-2014-4792

CVE-2014-2580

·

Published

2014-04-15

·

Updated

2014-05-27

Description by

CVSS 2.0
4.4
Medium
MetricsAV:L/AC:M/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)
Description The issue allows local guest administrators to cause a denial of service, resulting in a "scheduling while atomic" error and host crash, by sending a malformed packet. This occurs when using certain Linux versions that do not allow sleeping in softirq context, causing a mutex to be taken when trying to disable the interface.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
USN-2226-1
USN-2260-1
Found an issue in the description? Have something to add? Feel free to write us 👾