CVE-2015-6654 — XEN vulnerability
Severity
2.1LOWNVD
EPSS
0.0%
top 85.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 3
Latest updateMay 17
Description
The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page, which allows remote domains to cause a denial of service by leveraging permissions to map the memory of a foreign guest.
CVSS vector
AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9