CVE-2014-7154: Debian Linux

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.

Affected products

• Debian Debian Linux: version 7.0 only
• Fedoraproject Fedora: version 19 only; version 20 only
• Opensuse Opensuse: version 12.3 only; version 13.1 only
• Xen Xen: version 4.1.0 only; version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.4 only; version 4.1.5 only; …

Published 2014-10-02. Last modified 2026-06-17.