CVEvulnerability

CVE-2015-5307

4.9 MEDIUM Published 2015-11-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

Affected configurations

• linux linux kernel (<= 4.2.3) • xen xen 4.3.0 • xen xen 4.3.1 • xen xen 4.3.2 • xen xen 4.3.3 • xen xen 4.3.4 • xen xen 4.4.0 • xen xen 4.4.1 • xen xen 4.4.2 • xen xen 4.4.3 • xen xen 4.4.4 • xen xen 4.5.0 • xen xen 4.5.1 • xen xen 4.5.2 • xen xen 4.5.3 • xen xen 4.5.5 • xen xen 4.6.0 • xen xen 4.6.1 • xen xen 4.6.2 • xen xen 4.6.3 • xen xen 4.6.4 • xen xen 4.6.5 • xen xen 4.6.6 • oracle vm virtualbox (>= 4.0.0 <= 4.0.34) • oracle vm virtualbox (>= 4.1.0 <= 4.1.42) • oracle vm virtualbox (>= 4.2.0 <= 4.2.34) • oracle vm virtualbox (>= 4.3.0 <= 4.3.29) • oracle vm virtualbox (>= 5.0.0 <= 5.0.8) • debian debian linux 7.0 • debian debian linux 8.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10

Related

Weakness · not in database (1)

References