UpHeron
All vulnerabilities

Servers and applications

CVE-2019-18423

An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical frame. The rest of the code in the two functions will assume that there is a valid root table and check that with BUG_ON(). The…

Severity
High 8.8
Published
31 Oct 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.1% in the next 30 daysHigher than 81% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • From 4.8 up to 4.12.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-18423
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-18423