CVE-2015-7970: Medium severity xen xapi vulnerability

Published Oct 30, 2015

Updated

The p2mpodemergencysweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.

Affected Software

5 affected components

XEN Xen=3.4.0

XEN Xen=3.4.1

XEN Xen=3.4.2

XEN Xen=3.4.3

XEN Xen=3.4.4

Event History

Oct 30, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7970?

CVE-2015-7970 is classified as a high severity vulnerability due to its ability to cause denial of service.

How do I fix CVE-2015-7970?

To fix CVE-2015-7970, upgrade to a patched version of Xen that addresses this issue.

What impact does CVE-2015-7970 have on affected systems?

CVE-2015-7970 can lead to excessive CPU consumption and may cause the system to reboot.

Which versions of Xen are affected by CVE-2015-7970?

CVE-2015-7970 affects Xen versions 3.4.x, 3.5.x, and 3.6.x.

Who is at risk from CVE-2015-7970?

Local x86 HVM guest administrators are at risk from CVE-2015-7970, as they can exploit the vulnerability to disrupt services.