Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-6654

Fixed in a distro release EPSS <1%

The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page, which allows remote domains to cause a denial of service by leveraging permissions to map the memory of a foreign guest.

Published 2015-09-03 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Debian 12xen4.8.0~rc3-1
Debian 13xen4.8.0~rc3-1
Debian 14xen4.8.0~rc3-1
Debian 8xen4.4.1-9+deb8u3
Ubuntu 14.04 LTSxen4.4.2-0ubuntu0.14.04.2