CVE ID:	CVE-2013-1920
Description:	Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1920 1028388 http://www.securitytracker.com/id/1028388 52857 http://secunia.com/advisories/52857 55082 http://secunia.com/advisories/55082 58880 http://www.securityfocus.com/bid/58880 92050 http://osvdb.org/92050 GLSA-201309-24 http://security.gentoo.org/glsa/glsa-201309-24.xml SUSE-SU-2014:0411 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html SUSE-SU-2014:0446 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html SUSE-SU-2014:0470 http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html [Xen-announce] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html [oss-security] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations http://www.openwall.com/lists/oss-security/2013/04/04/7 openSUSE-SU-2013:0912 http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html xen-cve20131920-code-exec(83226) https://exchange.xforce.ibmcloud.com/vulnerabilities/83226