CVE-2020-27673: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.

Affected products

• Debian Debian Linux: version 9.0 only
• Linux Linux Kernel: from 2.6.12, before 4.4.244 (fixed in 4.4.244); from 4.5.0, before 4.9.244 (fixed in 4.9.244); from 4.10.0, before 4.14.207 (fixed in 4.14.207); from 4.15.0, before 4.19.155 (fixed in 4.19.155); from 4.20.0, before 5.4.75 (fixed in 5.4.75); from 5.5.0, before 5.9.5 (fixed in 5.9.5); …
• Opensuse Leap: version 15.1 only; version 15.2 only
• Xen Xen: up to and including 4.14.0

Published 2020-10-22. Last modified 2026-06-17.