vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2015-8104

CRITICAL
10
CVSS Score
Published: November 16, 2015 at 12:00 AM UTC
Updated: June 17, 2026 at 12:34 AM UTC
6 products affected across 5 vendorsLinux KernelDebian LinuxUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL10
Exploit prediction
EPSS 2%
SSVC
No known exploit

Description

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux· Canonicalrubygems
95%
12.0414.0415.04
Debian Linux· Debiandrupal
95%
7.08.09.0
Linux Kernel· Linux
95%
v ≤ 4.2.3
Solaris· Oraclerubygems
95%
11.3
VM VirtualBox· Oracle
95%
4.0.0 ≤ v ≤ 4.0.344.1.0 ≤ v ≤ 4.1.424.2.0 ≤ v ≤ 4.2.344.3.0 ≤ v ≤ 4.3.355.0.0 ≤ v ≤ 5.0.13
Xen· Xenwordpress-plugin
95%
4.3.04.3.14.3.24.3.34.3.44.4.04.4.14.4.24.4.34.5.04.5.14.5.24.6.04.6.14.6.24.6.44.6.5

References (43)

Issue TrackingPatchVendor Advisory
Source: [email protected]
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbdb967af3d54993f5814f1cee0ed311a055377d
Vendor AdvisoryMailing ListThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html
Vendor AdvisoryMailing ListThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html
Vendor AdvisoryMailing ListThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html

SSVC — Action Prioritization

SSVCNo known exploitAutomatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

10CRITICALCISA-ADP
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card