Candidate: CVE-2015-4164 PublicDate: 2015-06-15 15:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4164 http://xenbits.xen.org/xsa/advisory-136.html Description: The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_xen: Tags_xen: universe-binary upstream_xen: needs-triage precise_xen: released (4.1.6.1-0ubuntu0.12.04.6) trusty_xen: released (4.4.2-0ubuntu0.14.04.2) trusty/esm_xen: DNE (trusty was released [4.4.2-0ubuntu0.14.04.2]) utopic_xen: ignored (reached end-of-life) vivid_xen: released (4.5.0-1ubuntu4.2) wily_xen: not-affected (4.5.1-0ubuntu1) devel_xen: not-affected (4.5.1-0ubuntu1)