PT-2020-16115 · Xen+1 · Xen+1

Andrew Cooper · Published 2020-09-23 · Updated 2024-06-15 · CVE-2020-25598

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 4.12 through 4.14.x

Description A missing unlock in the XENMEM acquire resource error path causes an RCU reference to be leaked. This can lead to a host Denial of Service when administration operations, such as CPU offline, livelock. The vulnerability can generally only be exploited by x86 HVM VMs, as these are the only type of VM that have a Qemu stubdomain. The side effects are believed to be benign on Xen versions 4.12 and 4.13.

Recommendations For Xen versions 4.12 through 4.14.x, apply the provided patches to resolve the issue. As a temporary workaround, consider restricting the use of HVM stubdomains to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-670

Related Identifiers

CVE-2020-25598

OPENSUSE-SU-2020:1608-1

OPENSUSE-SU-2020_1608-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2020:2788-1

SUSE-SU-2020:2790-1

SUSE-SU-2020:2791-1

Affected Products

Suse

Xen

References · 125

• https://osv.dev/vulnerability/openSUSE-SU-2020:1608-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2788-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202011-06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25598 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-25598 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2791-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE · Vendor Advisory
• https://xenbits.xen.org/xsa/advisory-334.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25598 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:2790-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-27671 · Note