Login Request a demo
Unscored severity · published Mar 12, 2015
CVE-2015-2150
Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
through 3.19.1 · source: NVD
UB
Ubuntu · Ubuntu
12.04 · source: NVD
XE
Xen · Xen
3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +24 more · source: NVD
Affected product
KE
Kernel
Linux
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2150
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2150
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability