CVE-2014-2986: Xen

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service (NULL pointer dereference and host crash) via unspecified vectors.

Affected products

• Xen Xen: version 4.4.0 only

Published 2014-04-28. Last modified 2026-06-17.