CVE-2015-2752
Fixed in a distro release EPSS <1%
The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service (host CPU consumption) via a crafted request to the device model (qemu-dm).
Products: fedoraproject fedora, xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.4.1-9 |
| Debian 13 | xen | 4.4.1-9 |
| Debian 14 | xen | 4.4.1-9 |
| Debian 7 | xen | 4.1.6.1-1+deb7u1 |
| SUSE Linux Enterprise Desktop 12 | xen | 4.4.2_02-15.1 |
| SUSE Linux Enterprise Desktop 12 | xen | 4.4.2_04-18.1 |
| SUSE Linux Enterprise Server 12 | xen | 4.4.2_02-15.1 |
| SUSE Linux Enterprise Server 12 | xen | 4.4.2_04-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.2_02-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.2_04-18.1 |
| SUSE Linux Enterprise Software Development Kit 12 | xen | 4.4.2_02-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 | xen | 4.4.2_04-18.1 |
| Ubuntu 14.04 LTS | xen | 4.4.1-0ubuntu0.14.04.5 |