Description
The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | virtio-win | 1.7.4-1.el7 | RHSA-2015:1044 |
| RHEL 6 | virtio-win | 1.7.4-1.el6_6 | RHSA-2015:1043 |
Advisories 2
- RHSA-2015:1043 Red Hat Security Advisory: virtio-win security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1044 Red Hat Security Advisory: virtio-win security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2015:1044 vendor-advisory
- https://www.redhat.com/security/data/cve/CVE-2015-3215.html
- RHSA-2015:1043 vendor-advisory
- https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea84c5429992ca3e996d7d4fbc8238
- https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1