CVE-2015-6654: Xen

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page, which allows remote domains to cause a denial of service by leveraging permissions to map the memory of a foreign guest.

Affected products

• Xen Xen: version 4.4.0 only; version 4.5.0 only; version 4.5.1 only

Published 2015-09-03. Last modified 2026-06-17.