CVE-2015-0777: Xen

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.

Affected products

• Xen Xen: version 3.4.0 only; version 3.4.1 only; version 3.4.2 only; version 3.4.3 only; version 3.4.4 only

Published 2015-04-05. Last modified 2026-06-17.