CVE-2014-9030

EPSS 1.6%

Published: 11/24/2014Modified: 4/28/2026

Also known as:DEBIAN-CVE-2014-9030

Description

The do_mmu_update function in arch/x86/mm.c in Xen 3.2.x through 4.4.x does not properly manage page references, which allows remote domains to cause a denial of service by leveraging control over an HVM guest and a crafted MMU_MACHPHYS_UPDATE.

Affected packages (1)

Debian/xenfrom 0, < 4.4.1-4

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-9030