CVE-2014-9065: Opensuse

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

common/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability to CVE-2014-9066.

Affected products

• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Xen Xen: up to and including 4.4.1

Published 2014-12-09. Last modified 2026-06-17.