CVE-2014-9066: Opensuse

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability than CVE-2014-9065.

Affected products

• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Xen Xen: up to and including 4.4.1

Published 2014-12-09. Last modified 2026-06-17.