CVE-2021-28039 | BDVDB-2026-150039 Detail

Description#

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-03-05Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.