CVE-2014-3969: Xen

High severity, CVSS 7.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

Affected products

• Xen Xen: version 4.4.0 only

Published 2014-06-05. Last modified 2026-06-17.