description: network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be freed.
problem types: unknown
affected:
{
product: Linux
vendor: Linux
versions:
status: unknown, version: consult Xen advisory XSA-405
}
metrics:
other: [
content: {'description': {'description_data': [{'lang': 'eng', 'value': 'A misbehaving or malicious backend may cause a Denial of Service (DoS)\nin the guest.  Information leaks or privilege escalation cannot be\nruled out.'}]}}
type: unknown
]