Advisory: XSA-462

In the APIC error model, it's possible for the delivery of an error to trigger a subsequent error. While the logic in Xen was written to avoid unbound recursion, state was protected by a non-recursive spinlock which can be forced to deadlock in this case.

See also: tests/xsa-462/main.c