# CVE-2020-25597: libxencall1: An issue was discovered in Xen through 4.14.x CVE-2020-25597 is fixed in 22 products on 1 platform, first by libxencall1 4.11.3+24-g14b62ab3e5-1ubuntu2.3, released September 23, 2020. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2020-25597 - Priority: Routine - CVSS: n/a (Medium) - EPSS: 0.0036 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 23, 2020 ## Description An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libxencall1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxencall1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxencall1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxendevicemodel1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxendevicemodel1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxendevicemodel1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxenevtchn1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxenevtchn1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxenevtchn1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxenforeignmemory1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxenforeignmemory1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxenforeignmemory1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxengnttab1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxengnttab1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxengnttab1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxenmisc4.11 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxenmisc4.11 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxenmisc4.11-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxenstore3.0 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxenstore3.0 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxenstore3.0-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxentoolcore1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxentoolcore1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxentoolcore1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | libxentoollog1 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [libxentoollog1 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxentoollog1-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-4.11-amd64 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-4.11-amd64 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-4.11-amd64-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-4.11-arm64 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-4.11-arm64 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-4.11-arm64-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-4.11-armhf Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-4.11-armhf 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-4.11-armhf-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-4.9-amd64 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-4.9-amd64 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-4.9-amd64-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-4.9-arm64 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-4.9-arm64 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-4.9-arm64-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-4.9-armhf Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-4.9-armhf 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-4.9-armhf-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-hypervisor-common Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-hypervisor-common 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-hypervisor-common-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-system-amd64 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-system-amd64 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-system-amd64-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-system-arm64 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-system-arm64 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-system-arm64-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-system-armhf Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-system-armhf 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-system-armhf-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-utils-4.11 Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-utils-4.11 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-utils-4.11-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xen-utils-common Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xen-utils-common 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xen-utils-common-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | | Linux | xenstore-utils Ubuntu 20.04 LTS (focal) | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | [xenstore-utils 4.11.3+24-g14b62ab3e5-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xenstore-utils-4.11.3-24-g14b62ab3e5-1ubuntu2.3.md) | Sep 23, 2020 | --- Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.