CVE-2018-5244
Fixed in a distro release EPSS <1%
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.15 | xen | 4.10.0-r1 |
| Alpine 3.16 | xen | 4.10.0-r1 |
| Alpine 3.17 | xen | 4.10.0-r1 |
| Alpine 3.18 | xen | 4.10.0-r1 |
| Alpine 3.19 | xen | 4.10.0-r1 |
| Alpine 3.20 | xen | 4.10.0-r1 |
| Alpine 3.21 | xen | 4.10.0-r1 |
| Alpine 3.22 | xen | 4.10.0-r1 |
| Alpine 3.23 | xen | 4.10.0-r1 |
| Alpine 3.24 | xen | 4.10.0-r1 |
| openSUSE Tumbleweed | xen | 4.15.1_01-1.2 |