CVE-2019-19581

CVE-2019-19581 is a denial-of-service vulnerability affecting Xen through version 4.12.x on 32-bit Arm systems. It stems from mishandled bit iteration in the hypervisor's bitmap functions, allowing a malicious 32-bit Arm guest OS user to trigger an out-of-bounds access. This can lead to a hypervisor crash or hang, resulting in a Denial of Service (DoS) with a CVSS score of 6.5 (Medium). While the attack vector is local with low complexity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.