CVE-2014-8594

Publication date 19 November 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).

Read the notes from the security team

Status

Package Ubuntu Release Status
xen 14.10 utopic
Fixed 4.4.1-0ubuntu0.14.10.2
14.04 LTS trusty
Fixed 4.4.1-0ubuntu0.14.04.2
12.04 LTS precise
Fixed 4.1.6.1-0ubuntu0.12.04.4
10.04 LTS lucid Not in release
xen-3.3 14.10 utopic Not in release
14.04 LTS trusty Not in release
12.04 LTS precise Not in release
10.04 LTS lucid
Not affected

Notes

mdeslaur

4.0+