CVE-2015-6654
Fixed in a distro release EPSS <1%
The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page, which allows remote domains to cause a denial of service by leveraging permissions to map the memory of a foreign guest.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.8.0~rc3-1 |
| Debian 13 | xen | 4.8.0~rc3-1 |
| Debian 14 | xen | 4.8.0~rc3-1 |
| Debian 8 | xen | 4.4.1-9+deb8u3 |
| Ubuntu 14.04 LTS | xen | 4.4.2-0ubuntu0.14.04.2 |