CVE-2021-28039

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen

published March 5, 2021

CVSS
—
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Published
2021-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen
    cvelistv5