NetSight
critical10.0

CVE-2015-8104

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by…

Impact

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

Affected products

VendorProductAffected versions
XenXen
Versions 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0
OracleSolaris
Version 11.3
OracleVm Virtualbox
from 4.0.0 through 4.0.34
from 4.1.0 through 4.1.42
from 4.2.0 through 4.2.34
from 4.3.0 through 4.3.35
from 5.0.0 through 5.0.13
LinuxLinux Kernel
through 4.2.3
DebianDebian Linux
Versions 7.0, 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04

Weakness classification

References