Ubuntu AWS kernel fix addresses Xen backend memory DoS
Original title: USN-8967-1: Linux kernel (AWS) vulnerability
A guest that stops processing packets can exhaust kernel memory in the Xen network backend domain.
Ubuntu published USN-8967-1 for the Linux kernel used on AWS. Jürgen Groß found that the Xen network backend driver did not adequately limit queued packets when a guest failed to process them. An attacker in a guest VM can cause a denial of service through excessive kernel memory consumption in the network backend domain. The snippet names no CVE or fixed version.
Unconfirmed: No CVE identifier, affected version or exploitation status is stated in the snippet.
- The flaw is in the Xen network backend driver.
- Impact is excessive kernel memory consumption, not described as code execution.
- The attacker must be inside a guest virtual machine.
- The snippet names no CVE identifier or fixed version.
Impact: denial of service via kernel memory exhaustion
| Product | Affected |
|---|---|
| Canonical Linux kernel (AWS) | — |
- 1.Install the updated AWS Linux kernel packages from Ubuntu.
- Vendors
- Canonical
- Products
- Linux kernel
From the original article
Jürgen Groß discovered that the Xen network backend driver in the Linux kernel did not adequately limit the amount of queued packets when a guest did not process them. An attacker in a guest VM can use this to cause a denial of service (excessive kernel memory consumption) in the network backend domain.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.