CVE-2011-2519

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-27 · updated 2026-06-16
Weakness: CWE-476

Description

Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction.

Affected products

RedHat Enterprise Linux Desktop: 5.0
RedHat Enterprise Linux Server: 5.0
RedHat Enterprise Linux Workstation: 5.0
xen: before 3.3.0 — fixed in 3.3.0

How to fix

Upgrade to a fixed version: xen 3.3.0. Check the vendor advisory for mitigations.

References

http://rhn.redhat.com/errata/RHSA-2011-1212.html
http://www.openwall.com/lists/oss-security/2011/08/30/1
http://xenbits.xen.org/hg/xen-3.1-testing.hg/rev/15644
https://bugzilla.redhat.com/show_bug.cgi?id=718882
http://rhn.redhat.com/errata/RHSA-2011-1212.html
http://www.openwall.com/lists/oss-security/2011/08/30/1
http://xenbits.xen.org/hg/xen-3.1-testing.hg/rev/15644
https://bugzilla.redhat.com/show_bug.cgi?id=718882

Get alerted when CVE-2011-2519 or the next vulnerability affects your stack