CVE-2012-4535: Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial...

Security readout for executives and security teams

CVE-2012-4535 is a denial-of-service flaw in Xen. A guest operating system administrator could trigger an infinite loop in the hypervisor by setting an inappropriate VCPU deadline, consuming physical CPU resources and affecting host availability. Exposure is most likely on legacy Xen hosts running versions 3.4 through 4.2, or vendor-maintained Xen packages from that era. Risk is higher where guest administrators are untrusted, such as hosting, lab, or multi-tenant virtualization environments. Treat this as a legacy virtualization availability risk. It is not presented as data compromise, but affected shared Xen hosts could suffer service disruption from a malicious or compromised guest administrator. Mitigation focus: Identify Xen hypervisors running 3.4 through 4.2 or possibly earlier versions.; Apply relevant Xen or Linux distribution security updates from vendor advisories.; Prioritize shared or multi-tenant hosts with untrusted guest administrators..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.