Denial of Service Vulnerability in Xen 4.6 via hvm_set_callback_via Function

CVE-2015-8615 · LOW Severity

AV:L/AC:L/AU:N/C:N/I:N/A:P

The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).

Learn more about our User Device Pen Test.