Vulnetix
Try Vulnetix Request Demo
CVE-2015-7970 PUBLISHED

The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.

EPSS 0.07% · 21.8th percentile

Risk Scores

EPSS Score
0.07%
21.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSxen0, 4.3.0-1ubuntu1, 4.3.0-1ubuntu2

Timeline

References

Open in Interactive Console →