The vulnerability occurs in the Xen hypervisor where, during domain teardown, node data is cleaned up but usage counts are not properly cleared. When the same domain ID is reused, the new domain inherits leaked usage counts, limiting the number of nodes it can create before being considered over quota. This affects multiple specific Ubuntu Xen package versions across various LTS and non-LTS releases.

The impact is a resource usage limitation where new domains with reused IDs can create fewer nodes than intended, potentially causing denial of service or degraded performance in virtualized environments relying on Xen. There is no indication of privilege escalation or remote code execution. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor Ubuntu security advisories for updates addressing this issue.