CVE-2015-8104

Published: 16 November 2015

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

From the Ubuntu Security Team

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service (system crash) in the host OS.

Notes

for linux kernel, only affects AMD processors (svm)

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8104
• http://xenbits.xen.org/xsa/advisory-156.html
• https://ubuntu.com/security/notices/USN-2841-2
• https://ubuntu.com/security/notices/USN-2841-1
• https://ubuntu.com/security/notices/USN-2843-1
• https://ubuntu.com/security/notices/USN-2842-1
• https://ubuntu.com/security/notices/USN-2842-2
• https://ubuntu.com/security/notices/USN-2844-1
• https://ubuntu.com/security/notices/USN-2840-1
• https://ubuntu.com/security/notices/USN-2843-2
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1520184