The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vectors involving a new event channel port.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-1762
https://bugzilla.redhat.com/show_bug.cgi?id=701240