Log in Start free

Vulnerability · Published Sep 23, 2020 · Assigned by mitre

CVE-2020-25604

Medium 4.7

In plain English

A medium-severity security flaw in the xen package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.7Medium
Exploit odds (30 days)0.3%top 82.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20xen4.14.0-r1ALPINE-CVE-2020-25604
Alpine:v3.21xen4.14.0-r1ALPINE-CVE-2020-25604
Alpine:v3.22xen4.14.0-r1ALPINE-CVE-2020-25604
Alpine:v3.23xen4.14.0-r1ALPINE-CVE-2020-25604
Alpine:v3.24xen4.14.0-r1ALPINE-CVE-2020-25604
Debian:12xen4.14.0+80-gd101b417b7-1DEBIAN-CVE-2020-25604
Debian:13xen4.14.0+80-gd101b417b7-1DEBIAN-CVE-2020-25604
Debian:14xen4.14.0+80-gd101b417b7-1DEBIAN-CVE-2020-25604

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References