CVE-2015-2150

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to…

published March 12, 2015

CVSS
—
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Published
2015-03-12T14:00Z
EPSS history
Timeline
  • 12 MAR 14:00Z
    Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to…
    cvelistv5