CVE-2018-7540 (NVD)

2018-02-27

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.

Products Debian_linux, Xen
Type Uncontrolled Resource Consumption (CWE-400)
First patch - None (likely due to unavailable code)
Links • https://security.gentoo.org/glsa/201810-06
• http://www.securitytracker.com/id/1040773
• https://support.citrix.com/article/CTX232096
• https://xenbits.xen.org/xsa/advisory-252.html
• http://www.securityfocus.com/bid/103174