VULNERABILITY INTELLIGENCE

CVE-2015-8340

CVSS score4.7 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2015-12-17
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.

Primary references