CVE-2014-3125: Xen

Medium severity, CVSS 6.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors.

Affected products

• Xen Xen: version 4.4.0 only

Published 2014-05-02. Last modified 2026-06-17.