CVEvulnerability

CVE-2012-6031

4.7 MEDIUM Published 2012-11-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.

Affected configurations

• xen xen 4.0.0 • xen xen 4.1.0 • xen xen 4.2.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References