https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:41:36 +0000 https://cve.radiocsirt.org/vuln/cve-2015-8551 <p>The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka &#34;Linux pciback missing sanity checks.&#34;</p> <p>The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka &#34;Linux pciback missing sanity checks.&#34;</p> https://cve.radiocsirt.org/vuln/cve-2015-8551 https://cve.radiocsirt.org/vuln/usn-2848-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service (crash the host) or potentially execute arbitrary code on the host. (CVE-2015-8550)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service (NULL dereference) on the host. (CVE-2015-8551)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service by flooding the logging system with WARN() messages causing the initial domain to exhaust disk space. (CVE-2015-8552)</p> <p>Jann Horn discovered a ptrace issue with user namespaces in the Linux kernel. The namespace owner could potentially exploit this flaw by ptracing a root owned process entering the user namespace to elevate its privileges and potentially gain access outside of the namespace. (http://bugs.launchpad.net/bugs/1527374, CVE-2015-8709)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service (crash the host) or potentially execute arbitrary code on the host. (CVE-2015-8550)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service (NULL dereference) on the host. (CVE-2015-8551)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service by flooding the logging system with WARN() messages causing the initial domain to exhaust disk space. (CVE-2015-8552)</p> <p>Jann Horn discovered a ptrace issue with user namespaces in the Linux kernel. The namespace owner could potentially exploit this flaw by ptracing a root owned process entering the user namespace to elevate its privileges and potentially gain access outside of the namespace. (http://bugs.launchpad.net/bugs/1527374, CVE-2015-8709)</p> https://cve.radiocsirt.org/vuln/usn-2848-1