CVE-2015-7812: Xen

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible hypercall to the multicall interface.

Affected products

• Xen Xen: version 4.4.0 only; version 4.4.1 only; version 4.4.2 only; version 4.4.3 only; version 4.5.0 only; version 4.5.1 only; …

Published 2015-11-17. Last modified 2026-06-17.