{"id":"CVE-2011-3131","aliases":["DEBIAN-CVE-2011-3131","DSA-2582-1","EUVD-2011-3099","GHSA-86mp-q3fq-9h73","RHSA-2011:1386"],"status":"published","title":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a...","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0044,"percentile":0.38499,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2012-12-07T00:00:00Z","modified":"2026-10-23T17:47:34Z","fixes":[{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.1.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.1.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.1.2-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-5.5"}]}],"versions":["4.0.1-2","4.0.1-4","4.0.1-5","4.0.1-5.1","4.0.1-5.2","4.0.1-5.3","4.0.1-5.4"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.7.1.el5"}]}],"bundled":15}],"products":[{"vendor":"xen","product":"xen"}],"references":[{"url":"http://xenbits.xen.org/hg/staging/xen-4.1-testing.hg/rev/84e3706df07a","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://www.debian.org/security/2012/dsa-2582","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/45622","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://old-list-archives.xen.org/archives/html/xen-devel/2011-08/msg00450.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/51468","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://old-list-archives.xen.org/archives/html/xen-devel/2011-06/msg01106.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/49146","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3131","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-86mp-q3fq-9h73"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-3131","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1386","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.7_Technical_Notes/kernel.html#RHSA-2011-1386","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1241.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1065.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=684671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=697394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=715436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=722393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=722557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739823","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1386.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1585","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1585","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1833","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2484","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2496","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2496","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2695","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2695","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2723","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2723","tags":["advisory"]},{"url":"http://git.kernel.org/linus/17dd759c67f21e34f2156abcf415e1f60605a188","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2942","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3188","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3209","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3347","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3347","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-3131","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","status":"published","published":"2012-12-13T11:00:00Z","modified":"2024-09-16T23:45:36.24Z","updated_at":"2026-11-02T14:35:36.968002Z"}],"euvd":[{"id":"EUVD-2011-3099","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","status":"published","published":"2012-12-13T11:00:00Z","modified":"2024-09-16T23:45:36Z","updated_at":"2026-11-03T00:54:47.592767Z"}],"ghsa":[{"id":"GHSA-86mp-q3fq-9h73","title":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a...","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","status":"published","published":"2022-05-17T05:17:54Z","modified":"2023-01-28T05:03:38Z","updated_at":"2026-11-02T14:44:01.162268Z"}],"nvd":[{"id":"CVE-2011-3131","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","status":"published","published":"2012-12-13T11:53:33.35Z","modified":"2026-06-16T23:32:43.287Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"CVE-2011-3131","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","status":"published","published":"2012-12-13T11:53:33Z","modified":"2026-04-10T03:41:56.597951Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-3131","description":"Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.","status":"published","published":"2012-12-13T11:53:33.35Z","modified":"2026-10-23T17:47:34.470967969Z","updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"DSA-2582-1","title":"xen - denial of service","status":"published","published":"2012-12-07T00:00:00Z","modified":"2026-03-09T01:17:56.543387Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"RHSA-2011:1386","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-15T19:31:00Z","modified":"2026-06-28T10:05:20Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}