Linux Kernel CVE-2015-8104 Denial of Service Vulnerability

Linux Kernel is prone to a denial-of-service vulnerability.

An attacker with a guest account can exploit this issue to cause an infinite loop in the host, denying service to legitimate users.

Information

Bugtraq ID: 77524
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2015-8104

Remote: Yes
Local: No
Published: Nov 10 2015 12:00AM
Updated: Apr 19 2017 01:04AM
Credit: Ben Serebrin from Google and Jan Beulich from SUSE.
Vulnerable: Xen Xen 4.6
Xen Xen 4.5.0
Xen Xen 4.4.1
Xen Xen 4.4.0
Xen Xen 4.4
Xen Xen 4.3.1
Xen Xen 4.3.0
Xen Xen 4.3
Xen Xen 4.2.3
Xen Xen 4.2.2
Xen Xen 4.2.1
Xen Xen 4.2.0
Xen Xen 4.2
Xen Xen 4.1.6.1
Xen Xen 4.1.5
Xen Xen 4.1.4
Xen Xen 4.1.3
Xen Xen 4.1.2
Xen Xen 4.1.1
Xen Xen 4.1.0
Xen Xen 4.1
Xen Xen 4.0.3
Xen Xen 4.0.2
Xen Xen 4.0.0
Xen Xen 4.0
Xen Xen 3.4.4
Xen Xen 3.4.3
Xen Xen 3.4.2
Xen Xen 3.4.1
Xen Xen 3.4.0
Xen Xen 3.3.2
Xen Xen 3.3.1
Xen Xen 3.3.0
Xen Xen 3.3
Xen Xen 3.2.3
Xen Xen 3.2.2
Xen Xen 3.2.1
Xen Xen 3.2.0
Xen Xen 3.2
Xen Xen 3.1.4
Xen Xen 3.1.3
Xen Xen 3.1
Xen Xen 3.0.4
Xen Xen 3.0.3
Xen Xen 3.0.2
Ubuntu Ubuntu Linux 14.04 LTS
SuSE SUSE Linux Enterprise Server 10 SP4 LTSS
S.u.S.E. openSUSE 13.2
S.u.S.E. openSUSE 13.1
Redhat Enterprise Linux Server EUS 6.6.z
Redhat Enterprise Linux Server AUS 6.4
Redhat Enterprise Linux 7
Redhat Enterprise Linux 6
Redhat Enterprise Linux 5
Oracle VM VirtualBox 5.0.9
Oracle VM VirtualBox 5.0.8
Oracle VM VirtualBox 4.3.9
Oracle VM VirtualBox 4.3.8
Oracle VM VirtualBox 4.3.7
Oracle VM VirtualBox 4.3.5
Oracle VM VirtualBox 4.2.35
Oracle VM VirtualBox 4.2.34
Oracle VM VirtualBox 4.2.30
Oracle VM VirtualBox 4.2.27
Oracle VM VirtualBox 4.2.26
Oracle VM VirtualBox 4.2.24
Oracle VM VirtualBox 4.2.23
Oracle VM VirtualBox 4.2.19
Oracle VM VirtualBox 4.2.18
Oracle VM VirtualBox 4.2.14
Oracle VM VirtualBox 4.2.12
Oracle VM VirtualBox 4.2
Oracle VM VirtualBox 4.1.43
Oracle VM VirtualBox 4.1.42
Oracle VM VirtualBox 4.1.38
Oracle VM VirtualBox 4.1.35
Oracle VM VirtualBox 4.1.34
Oracle VM VirtualBox 4.1.32
Oracle VM VirtualBox 4.1.31
Oracle VM VirtualBox 4.1.29
Oracle VM VirtualBox 4.1.28
Oracle VM VirtualBox 4.1.24
Oracle VM VirtualBox 4.1.22
Oracle VM VirtualBox 4.1.20
Oracle VM VirtualBox 4.1.18
Oracle VM VirtualBox 4.1.16
Oracle VM VirtualBox 4.1.14
Oracle VM VirtualBox 4.1.10
Oracle VM VirtualBox 4.1.8
Oracle VM VirtualBox 4.0.35
Oracle VM VirtualBox 4.0.34
Oracle VM VirtualBox 4.0.30
Oracle VM VirtualBox 4.0.27
Oracle VM VirtualBox 4.0.26
Oracle VM VirtualBox 4.0.24
Oracle VM VirtualBox 4.0.23
Oracle VM VirtualBox 4.0.21
Oracle VM VirtualBox 4.0.20
Oracle VM VirtualBox 4.0.18
Oracle VM VirtualBox 5.0
Oracle VM VirtualBox 4.3.6
Oracle VM VirtualBox 4.3.4
Oracle VM VirtualBox 4.2.22
Oracle VM VirtualBox 4.2.20
Oracle VM VirtualBox 4.2.2
Oracle VM VirtualBox 4.2.10
Oracle VM VirtualBox 4.2
Oracle VM VirtualBox 4.1.6
Oracle VM VirtualBox 4.1.30
Oracle VM VirtualBox 4.1.26
Oracle VM VirtualBox 4.1.2
Oracle VM VirtualBox 4.1.0
Oracle VM VirtualBox 4.1
Oracle VM VirtualBox 4.0.8
Oracle VM VirtualBox 4.0.6
Oracle VM VirtualBox 4.0.22
Oracle VM VirtualBox 4.0.16
Oracle VM VirtualBox 4.0.14
Oracle VM VirtualBox 4.0.12
Oracle VM VirtualBox 4.0.10
Oracle VM VirtualBox 4.0
Oracle VM Server for x86 3.4
Oracle VM Server for x86 3.3
Oracle VM Server for x86 3.2
Oracle Solaris 11.3
Oracle Linux 6.0
Oracle Linux 6
Oracle Linux 5
Oracle Linux 0
Oracle Enterprise Linux 7
Microsoft Windows Server 2012 R2 0
Microsoft Windows Server 2012 0
Microsoft Windows Server 2008 R2 for x64-based Systems SP1
Microsoft Windows Server 2008 for x64-based Systems SP2
Microsoft Windows 8.1 for x64-based Systems 0
Microsoft Windows 8 for x64-based Systems 0
Microsoft Windows 10 version 1511 for x64-based Systems 0
Microsoft Windows 10 for x64-based Systems 0
Linux kernel 4.2.3
Linux kernel 4.0.6
Linux kernel 3.19.3
Linux kernel 3.18.22
Linux kernel 3.18.17
Linux kernel 3.18.11
Linux kernel 3.18.8
Linux kernel 3.18.7
Linux kernel 3.18.3
Linux kernel 3.18.2
Linux kernel 3.18.1
Linux kernel 3.17.4
Linux kernel 3.17.2
Linux kernel 3.16.7
Linux kernel 3.16.2
Linux kernel 3.16.1
Linux kernel 3.15.5
Linux kernel 3.15.2
Linux kernel 3.14.54
Linux kernel 3.14.45
Linux kernel 3.14.37
Linux kernel 3.14.4
Linux kernel 3.14.3
Linux kernel 3.14.2
Linux kernel 3.13.11
Linux kernel 3.13.9
Linux kernel 3.13.3
Linux kernel 3.13.1
Linux kernel 3.12.49
Linux kernel 3.12.48
Linux kernel 3.12.44
Linux kernel 3.12.40
Linux kernel 3.12.21
Linux kernel 3.12.18
Linux kernel 3.12.17
Linux kernel 3.12.16
Linux kernel 3.12.11
Linux kernel 3.12.7
Linux kernel 3.12.4
Linux kernel 3.12.3
Linux kernel 3.12.2
Linux kernel 3.11.3
Linux kernel 3.10.90
Linux kernel 3.10.81
Linux kernel 3.10.73
Linux kernel 3.10.45
Linux kernel 3.10.41
Linux kernel 3.10.38
Linux kernel 3.10.37
Linux kernel 3.10.36
Linux kernel 3.10.30
Linux kernel 3.10.27
Linux kernel 3.10.26
Linux kernel 3.10.23
Linux kernel 3.10.22
Linux kernel 3.10.21
Linux kernel 3.10.14
Linux kernel 3.10.10
Linux kernel 3.10.9
Linux kernel 3.10.7
Linux kernel 3.8.9
Linux kernel 3.8.6
Linux kernel 3.8.5
Linux kernel 3.8.4
Linux kernel 3.8.2
Linux kernel 3.8.1
Linux kernel 3.7.10
Linux kernel 3.7.9
Linux kernel 3.7.8
Linux kernel 3.7.7
Linux kernel 3.7.5
Linux kernel 3.7.4
Linux kernel 3.7.3
Linux kernel 3.7.2
Linux kernel 3.7.1
Linux kernel 3.6.11
Linux kernel 3.6.10
Linux kernel 3.6.9
Linux kernel 3.6.8
Linux kernel 3.6.7
Linux kernel 3.6.6
Linux kernel 3.6.5
Linux kernel 3.6.4
Linux kernel 3.6.3
Linux kernel 3.6.2
Linux kernel 3.6.1
Linux kernel 3.5.7
Linux kernel 3.5.6
Linux kernel 3.5.5
Linux kernel 3.5.4
Linux kernel 3.5.3
Linux kernel 3.5.2
Linux kernel 3.5.1
Linux kernel 3.4.88
Linux kernel 3.4.87
Linux kernel 3.4.86
Linux kernel 3.4.80
Linux kernel 3.4.76
Linux kernel 3.4.73
Linux kernel 3.4.72
Linux kernel 3.4.71
Linux kernel 3.4.64
Linux kernel 3.4.58
Linux kernel 3.4.42
Linux kernel 3.4.36
Linux kernel 3.4.32
Linux kernel 3.4.31
Linux kernel 3.4.27
Linux kernel 3.4.26
Linux kernel 3.4.25
Linux kernel 3.4.21
Linux kernel 3.4.20
Linux kernel 3.4.19
Linux kernel 3.4.18
Linux kernel 3.4.17
Linux kernel 3.4.16
Linux kernel 3.4.15
Linux kernel 3.4.14
Linux kernel 3.4.13
Linux kernel 3.4.12
Linux kernel 3.4.11
Linux kernel 3.4.10
Linux kernel 3.4.9
Linux kernel 3.4.8
Linux kernel 3.4.7
Linux kernel 3.4.6
Linux kernel 3.4.5
Linux kernel 3.4.4
Linux kernel 3.4.3
Linux kernel 3.4.2
Linux kernel 3.4.1
Linux kernel 3.3.5
Linux kernel 3.3.4
Linux kernel 3.3.2
Linux kernel 3.2.72
Linux kernel 3.2.62
Linux kernel 3.2.57
Linux kernel 3.2.56
Linux kernel 3.2.51
Linux kernel 3.2.24
Linux kernel 3.2.23
Linux kernel 3.2.13
Linux kernel 3.2.12
Linux kernel 3.2.9
Linux kernel 3.2.1
Linux kernel 3.1.8
Linux kernel 3.0.98
Linux kernel 3.0.75
Linux kernel 3.0.72
Linux kernel 3.0.69
Linux kernel 3.0.65
Linux kernel 3.0.60
Linux kernel 3.0.59
Linux kernel 3.0.58
Linux kernel 3.0.37
Linux kernel 3.0.34
Linux kernel 3.0.5
Linux kernel 3.0.4
Linux kernel 3.0.2
Linux kernel 3.0.1
Linux kernel 4.2
Linux kernel 4.1
Linux kernel 4.0.5
Linux kernel 4.0
Linux kernel 3.9.8
Linux kernel 3.9.4
Linux kernel 3.9
Linux kernel 3.8
Linux kernel 3.7.6
Linux kernel 3.7
Linux kernel 3.6
Linux kernel 3.5
Linux kernel 3.4.93
Linux kernel 3.4.81
Linux kernel 3.4.70
Linux kernel 3.4.67
Linux kernel 3.4.29
Linux kernel 3.4
Linux kernel 3.3
Linux kernel 3.2.65
Linux kernel 3.2.64
Linux kernel 3.2.63
Linux kernel 3.2.60
Linux kernel 3.2.55
Linux kernel 3.2.54
Linux kernel 3.2.53
Linux kernel 3.2.52
Linux kernel 3.2.50
Linux kernel 3.2.44
Linux kernel 3.2.42
Linux kernel 3.2.38
Linux kernel 3.2.2
Linux kernel 3.2
Linux kernel 3.19
Linux kernel 3.18.9
Linux kernel 3.18
Linux kernel 3.17.6
Linux kernel 3.17
Linux kernel 3.16.6
Linux kernel 3.16
Linux kernel 3.15
Linux kernel 3.14.7
Linux kernel 3.14.5
Linux kernel 3.14
Linux kernel 3.13.7
Linux kernel 3.13.6
Linux kernel 3.13.5
Linux kernel 3.13.4
Linux kernel 3.13.0
Linux kernel 3.13
Linux kernel 3.12.22
Linux kernel 3.12.15
Linux kernel 3.12.14
Linux kernel 3.12.12
Linux kernel 3.12.1
Linux kernel 3.12
Linux kernel 3.11.9
Linux kernel 3.11.6
Linux kernel 3.11
Linux kernel 3.10.5
Linux kernel 3.10.43
Linux kernel 3.10.31
Linux kernel 3.10.20
Linux kernel 3.10.17
Linux kernel 3.10
Linux kernel 3.1
Linux kernel 3.0.66
Linux kernel 3.0.62
Linux kernel 3.0.18
Linux kernel 3.0
Juniper NorthStar Controller Application 2.1.0
Juniper JUNOS Space 15.2R2
Juniper JUNOS Space 15.2R1
Juniper JUNOS Space 15.1R2.11
Juniper JUNOS Space 15.1F2
Juniper JUNOS Space 14.1R1.9
Juniper JUNOS Space 14.1R1
Juniper JUNOS Space 13.3
Juniper JUNOS Space 12.3
Juniper JUNOS Space 12.1
Juniper JUNOS Space 11.2
Juniper JUNOS Space 1.3
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
Citrix XenServer 6.0.2 Common Criteria
Citrix XenServer 6.0.2
Citrix XenServer 4.1
Citrix XenServer 6.5 SP1
Citrix XenServer 6.5
Citrix XenServer 6.2.0 Sp1
Citrix XenServer 6.2 Service Pack 1
Citrix XenServer 6.2
Citrix XenServer 6.1
Citrix XenServer 6.0.2
Citrix XenServer 6.0
Citrix XenServer 5.6 SP2
Citrix XenServer 5.6 Fp1
Citrix XenServer 5.6 Common Criteria
Citrix XenServer 5.6
Citrix XenServer 5.6
Citrix XenServer 5.5 update1
Citrix XenServer 5.5
Citrix XenServer 5.0 Update 3
Citrix XenServer 5.0 Update 2
Citrix XenServer 5.0
Citrix XenServer 5.0

Not Vulnerable: Oracle VM VirtualBox 5.0.10
Oracle VM VirtualBox 4.3.34
Oracle VM VirtualBox 4.2.36
Oracle VM VirtualBox 4.1.44
Oracle VM VirtualBox 4.0.36
Juniper NorthStar Controller Application 2.1.0 Service Pack 1
Juniper JUNOS Space 16.1R1

References:

• KVM Homepage (KVM)
  
• Xen Homepage (XenSource )
  
• 2017-01 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 16. (Juniper)
  
• 2107-04 Security Bulletin: Multiple Vulnerabilities in NorthStar Controller Appl (juniper)
  
• 3108638: Update for Windows Hyper-V to Address CPU Weakness (Microsoft)
  
• Bug 1278496 - (CVE-2015-8104, xsa156) CVE-2015-8104 virt: guest to host DoS by t (Bugzilla)
  
• Citrix XenServer Security Update for CVE-2015-5307 and CVE-2015-8104 (Citrix)
  
• cpujul2016: Oracle Critical Patch Update Advisory - July 2016 (Oracle)
  
• CTX203879 Citrix XenServer Multiple Security Updates (Citrix)
  
• CVE-2015-8104 kernel: kvm: guest to host DoS by triggering an infinite loop in m (Seclists.org)
  
• Oracle Critical Patch Update Advisory - January 2016 (Oracle)
  
• Oracle Linux Bulletin - January 2016 (Oracle)
  
• Oracle VM Server for x86 Bulletin - July 2016 (Oracle)
  
• Ref: linuxbulletinoct2015-2719645 Oracle Linux Bulletin - October 2015 Revision (Oracle)
  
• RHSA-2016:0004-1: kernel security update (Red Hat)
  
• RHSA-2016:0024-1: kernel security and bug fix update (Red Hat)
  
• Xen Security Advisory 156 (CVE-2015-5307,CVE-2015-8104) - x86: CPU lockup during (Seclists.org)
  
• Xen Security Advisory CVE-2015-5307,CVE-2015-8104 / XSA-156 (Xen)
  

Source: www.securityfocus.com