Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction.
The product dereferences a pointer that it expects to be valid but is NULL.
Link | Tags |
---|---|
http://www.openwall.com/lists/oss-security/2011/08/30/1 | third party advisory mailing list |
http://rhn.redhat.com/errata/RHSA-2011-1212.html | third party advisory vendor advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=718882 | issue tracking third party advisory |
http://xenbits.xen.org/hg/xen-3.1-testing.hg/rev/15644 | patch vendor advisory |