CVE-2014-2580
Fixed in a distro release EPSS <1%
The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service ("scheduling while atomic" error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.13.10-1 |
| Debian 13 | linux | 3.13.10-1 |
| Debian 14 | linux | 3.13.10-1 |
| Ubuntu 14.04 LTS | linux | 3.13.0-27.50 |