CVE-2018-5244 | BDVDB-2026-94848 Detail

Description#

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.gentoo.org/glsa/201810-06
http://www.securityfocus.com/bid/102433
http://www.securitytracker.com/id/1040774
https://xenbits.xen.org/xsa/advisory-253.html

Exploit#

No public exploit known

History#

Version 12018-01-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.