Xen Backend Driver Thread Leak Lets Local Guest Users Deny Service

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1024786

SecurityTracker URL: http://securitytracker.com/id/1024786

CVE Reference: CVE-2010-3699 (Links to External Site)

Date: Nov 25 2010

Impact: Denial of service via local system

Fix Available: Yes Vendor Confirmed: Yes

Description: A vulnerability was reported in Xen. A local user can cause denial of service conditions.

A local user on the guest operating system can cause the backend driver to leak a kernel thread and prevent the virtual machine from being shutdown or prevent most xm commands from working.

Impact: A local user can on the guest operating system can prevent the virtual machine from being shutdown.

Solution: The vendor has issued a fix.

The vendor's advisory is available at:

http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/59f097ef181b

Vendor URL: xen.xensource.com/ (Links to External Site)

Cause: Access control error

Underlying OS: Linux (Any)

Message History: This archive entry has one or more follow-up message(s) listed below.

Date: Thu, 25 Nov 2010 19:01:50 +0000
Subject: Xen


http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/59f097ef181b