Xen Viridian Interface NULL Pointer Dereference Vulnerability

A NULL pointer dereference vulnerability has been identified in the Xen hypervisor's Viridian interface, specifically in versions 4.13 and newer. This vulnerability arises when updating the reference Time Stamp Counter (TSC) area, leading to a denial-of-service condition that affects the entire host.

Impact

Exploitation of this vulnerability causes a denial-of-service condition on the host, potentially leading to information leaks or unauthorized privilege escalation.

Remediation

To address this vulnerability, users can apply the patches provided in the Xen Security Advisory XSA-472. Instructions for applying these patches are included in the advisory.