CVE-2013-2212: The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with ac...

Security readout for executives and security teams

CVE-2013-2212 is a Xen hypervisor denial-of-service issue. A local HVM guest with access to memory-mapped I/O regions can trigger excessive CPU use and possibly crash the hypervisor or guest kernel. The business risk is service disruption on affected Xen hosts, especially where untrusted guests use PCI passthrough or similar device access. Exposure is limited to Xen environments running versions 3.3 through 4.3 with HVM guests that can access memory-mapped I/O regions. Hosts offering PCI passthrough to guests are specifically implicated by the advisory title. Non-Xen environments and Xen deployments without such guest access are not indicated by the provided sources. Treat as a targeted availability risk for legacy Xen infrastructure. Prioritize if the organization still runs Xen 3.3 through 4.3 or allows device passthrough to guest VMs. If Xen is not in use, business urgency is low. Mitigation focus: Identify Xen hosts running versions 3.3 through 4.3.; Review vendor advisories for Xen Security Advisory 60 updates.; Apply relevant Xen or distribution security updates from your vendor..

Prepared

Jun 14, 2026, 16:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.