Vulnerability in Xen

CVE-2015-7812

The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible hypercall to the multicall interface.

EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.4.0, 4.4.1, 4.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References