CVE-2014-8594

The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests…

published November 19, 2014

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02221 · 82.5th percentile
Published
2014-11-19T18:00Z
EPSS history
Timeline
  • 19 NOV 18:00Z
    The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests…
    cvelistv5