CVE-2013-4553

The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order…

published December 24, 2013

CVSS
—
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00565 · 46.2th percentile
Published
2013-12-24T19:00Z
EPSS history
Timeline
  • 24 DEC 19:00Z
    The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order…
    cvelistv5