CVE-2012-4539: Xen

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."

Affected products

• Xen Xen: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.1.0 only; …

Published 2012-11-21. Last modified 2026-06-16.