NetSight
IP …
medium4.9

CVE-2015-5307

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by…

Impact

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 4.2.3
XenXen
Versions 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0
OracleVm Virtualbox
from 4.0.0 through 4.0.34
from 4.1.0 through 4.1.42
from 4.2.0 through 4.2.34
from 4.3.0 through 4.3.29
from 5.0.0 through 5.0.8
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10

Weakness classification

CWE-399

References