Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8615

Fixed in a distro release EPSS 1%

The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).

Published 2016-01-08 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Debian 12xen4.8.0~rc3-1
Debian 13xen4.8.0~rc3-1
Debian 14xen4.8.0~rc3-1
Debian 7xen4.1.6.1-1+deb7u1
openSUSE Tumbleweedxen4.7.0_12-1.3