CVE-2015-5307

Published: Nov 16, 2015Modified: May 6, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

Affected (33)

Products: Linux: Linux Kernel · Xen: Xen · Oracle: Vm Virtualbox · +2 more

Show all products

Linux: Linux Kernel · Xen: Xen · Oracle: Vm Virtualbox · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.2.3

Configuration B

22 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.3.0
Xen Xen	Version 4.3.1
Xen Xen	Version 4.3.2
Xen Xen	Version 4.3.3
Xen Xen	Version 4.3.4
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.1
Xen Xen	Version 4.4.2
Xen Xen	Version 4.4.3
Xen Xen	Version 4.4.4
Xen Xen	Version 4.5.0
Xen Xen	Version 4.5.1
Xen Xen	Version 4.5.2
Xen Xen	Version 4.5.3
Xen Xen	Version 4.5.5
Xen Xen	Version 4.6.0
Xen Xen	Version 4.6.1
Xen Xen	Version 4.6.2
Xen Xen	Version 4.6.3
Xen Xen	Version 4.6.4
Xen Xen	Version 4.6.5
Xen Xen	Version 4.6.6

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Oracle Vm Virtualbox	From 4.0.0 to 4.0.34
Oracle Vm Virtualbox	From 4.1.0 to 4.1.42
Oracle Vm Virtualbox	From 4.2.0 to 4.2.34
Oracle Vm Virtualbox	From 4.3.0 to 4.3.29
Oracle Vm Virtualbox	From 5.0.0 to 5.0.8

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10

Related CWEs

CWE-399

References (76)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed

Source: secalert@redhat.com

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2636.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2645.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0046.html

Source: secalert@redhat.com

Third Party Advisory

http://support.citrix.com/article/CTX202583

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3396

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3414

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3454

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/11/10/6

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/77528

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1034105

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2800-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2801-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2802-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2803-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2804-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2805-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2806-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2807-1

Source: secalert@redhat.com

Third Party Advisory

http://xenbits.xen.org/xsa/advisory-156.html

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1277172

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed

Source: secalert@redhat.com

Vendor Advisory

https://kb.juniper.net/JSA10783

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed