VDB

ALPINE-CVE-2020-15564

ALPINE-CVE-2020-15564 PUBLISHED CVSS 6.5 MEDIUM

An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOP_register_vcpu_info. The hypercall VCPUOP_register_vcpu_info is used by a guest to register a shared region with the hypervisor. The region will be mapped into Xen address space so it can be directly accessed. On Arm, the region is accessed with instructions that require a specific alignment. Unfortunately, there is no check that the address provided by the guest will be correctly aligned. As a result, a malicious guest could cause a hypervisor crash by passing a misaligned address. A malicious guest administrator may cause a hypervisor crash, resulting in a Denial of Service (DoS). All Xen versions are vulnerable. Only Arm systems are vulnerable. x86 systems are not affected.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.18xen4.0.1-r0, 4.0.1-r1, 4.0.1-r3
Alpine:v3.22xen4.4.1-r6, 4.3.0-r4, 4.3.0-r6
Alpine:v3.16xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.11xen4.1.2-r4, 4.1.2-r5, 4.1.2-r6
Alpine:v3.12xen4.4.1-r5, 4.2.1-r2, 4.9.1-r2
Alpine:v3.9xen4.4.1-r8, 4.4.1-r7, 4.4.1-r6
Alpine:v3.23xen4.7.0-r2, 0, 4.0.1-r0
Alpine:v3.21xen4.2.1-r10, 4.2.1-r1, 4.2.1-r0
Alpine:v3.19xen0, 4.0.1-r3, 4.1.0-r0
Alpine:v3.20xen4.9.1-r3, 0, 4.0.1-r0
Alpine:v3.14xen4.12.0-r0, 0, 4.0.1-r0
Alpine:v3.13xen4.2.2-r8, 4.9.1-r2, 4.9.1-r1
Alpine:v3.10xen4.3.2-r4, 4.9.1-r3, 4.9.1-r2
Alpine:v3.17xen4.4.1-r5, 4.12.0-r0, 4.11.1-r1
Alpine:v3.15xen4.9.1-r3, 4.2.1-r1, 4.2.1-r0

Timeline

  • Jul 7, 2020 CVE Published
  • Dec 3, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›