CVE-2015-8615: Xen

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).

Affected products

• Xen Xen: version 4.6.0 only

Published 2016-01-08. Last modified 2026-06-17.