Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2015-8104 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2015-8104

CVE-2015-8104

CRITICAL10.0

The KVM subsystem in the Linux kernel through 4

Published Nov 16, 2015

Modified 10 months ago

Details

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

References(44)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbdb967af3d54993f5814f1cee0ed311a055377d

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html

http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html

http://rhn.redhat.com/errata/RHSA-2015-2636.html

http://rhn.redhat.com/errata/RHSA-2015-2645.html

http://rhn.redhat.com/errata/RHSA-2016-0046.html

http://support.citrix.com/article/CTX202583

http://support.citrix.com/article/CTX203879

http://www.debian.org/security/2015/dsa-3414

http://www.debian.org/security/2015/dsa-3426

http://www.debian.org/security/2016/dsa-3454

http://www.openwall.com/lists/oss-security/2015/11/10/5

http://www.openwall.com/lists/oss-security/2023/10/10/4

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

CVSS Analysis

CVSS v3.1

10.0

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

10/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Ecosystems

Timeline

PublishedNov 16, 2015

ModifiedApr 23, 2025