CVE-2012-5634: Xen

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.

Affected products

• Xen Xen: version 4.0.0 only; version 4.1.0 only; version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.4 only; …

Published 2013-02-14. Last modified 2026-06-16.