Description
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.2.6-1 | — |
| Debian 14 | xen | 4.8.0~rc3-1 | — |
| Debian 13 | linux | 4.2.6-1 | — |
| Debian 13 | xen | 4.8.0~rc3-1 | — |
| Debian 12 | linux | 4.2.6-1 | — |
| Debian 12 | xen | 4.8.0~rc3-1 | — |
| Debian 8 | linux | 3.16.7-ckt11-1+deb8u6 | DSA-3396-1 |
| Debian 8 | virtualbox | 4.3.36-dfsg-1+deb8u1 | DSA-3454-1 |
| Debian 8 | xen | 4.4.1-9+deb8u3 | DSA-3414-1 |
| Debian 7 | linux | 3.2.68-1+deb7u6 | DSA-3396-1 |
| Debian 7 | xen | 4.1.6.1-1+deb7u1 | DLA-479-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | xen | 4.5.1-0ubuntu2 | — |
| Ubuntu 14.04 LTS | linux | 3.13.0-68.111 | USN-2801-1 |
| Ubuntu 14.04 LTS | linux-lts-utopic | 3.16.0-53.72~14.04.1 | USN-2805-1 |
| Ubuntu 14.04 LTS | linux-lts-vivid | 3.19.0-33.38~14.04.1 | USN-2806-1 |
| Ubuntu 14.04 LTS | linux-lts-wily | 4.2.0-18.22~14.04.1 | USN-2807-1 |
| Ubuntu 14.04 LTS | virtualbox | 4.3.36-dfsg-1+deb8u1ubuntu1.14.04.1 | — |
| Ubuntu 14.04 LTS | xen | 4.4.2-0ubuntu0.14.04.3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | perf +18 | 3.10.0-327.3.1.el7 | RHSA-2015:2552 |
| RHEL 6 | perf +16 | 2.6.32-573.12.1.el6 | RHSA-2015:2636 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Mission Critical 6 | perf +9 | 2.6.32-220.65.1.el6 | RHSA-2016:0046 |
| RHEL 7.1 EUS | kernel-kdump +4 | 3.10.0-229.24.2.el7 | RHSA-2015:2587 |
| RHEL 7.1 EUS | perf +13 | 3.10.0-229.24.2.ael7b | RHSA-2015:2587 |
| RHEL 6.6 EUS | perf +16 | 2.6.32-504.40.1.el6 | RHSA-2016:0024 |
| RHEL 6.5 AUS | perf +10 | 2.6.32-431.68.1.el6 | RHSA-2015:2645 |
| RHEL 6.4 AUS | perf +9 | 2.6.32-358.69.1.el6 | RHSA-2016:0004 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | xen | 4.5.2_02-4.1 | SUSE-SU-2015:2324-1 |
| SLES 12 | kernel-docs | 3.12.51-52.31.5 | SUSE-SU-2015:2194-1 |
| SLES 12 | kernel-ec2 +5 | 3.12.51-52.31.1 | SUSE-SU-2015:2194-1 |
| SLES 12 | xen | 4.4.3_06-22.15.1 | SUSE-SU-2015:2328-1 |
| SLES 11 SP4 | kernel-docs | 3.0.101-68.2 | SUSE-SU-2015:2339-1 |
| SLES 11 SP4 | kernel-ec2 +7 | 3.0.101-68.1 | SUSE-SU-2015:2339-1 |
| SLES 11 SP4 | xen | 4.4.3_06-29.1 | SUSE-SU-2015:2338-1 |
| SLES 11 SP3 | kernel-docs | 3.0.101-0.47.71.3 | SUSE-SU-2015:2108-1 |
| SLES 11 SP3 | kernel-ec2 +8 | 3.0.101-0.47.71.1 | SUSE-SU-2015:2108-1 |
| SLES 11 SP3 | xen | 4.2.5_18-21.1 | SUSE-SU-2015:2326-1 |
| SLES 11 SP2 | kernel-ec2 +6 | 3.0.101-0.7.40.1 | SUSE-SU-2016:2074-1 |
| SLES 11 SP2 | xen | 4.1.6_08-23.1 | SUSE-SU-2015:2306-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | xen | 4.5.2_02-4.1 | SUSE-SU-2015:2324-1 |
| SLES for SAP 12 | kernel-xen +3 | 3.12.51-52.31.1 | SUSE-SU-2015:2194-1 |
| SLES for SAP 12 | xen | 4.4.3_06-22.15.1 | SUSE-SU-2015:2328-1 |
| SLES for SAP 11 SP4 | kernel-ec2 +7 | 3.0.101-68.1 | SUSE-SU-2015:2339-1 |
| SLES for SAP 11 SP4 | xen | 4.4.3_06-29.1 | SUSE-SU-2015:2338-1 |
| SLES for SAP 11 SP3 | kernel-ec2 +8 | 3.0.101-0.47.71.1 | SUSE-SU-2015:2108-1 |
| SLES for SAP 11 SP3 | xen | 4.2.5_18-21.1 | SUSE-SU-2015:2326-1 |
| SLE Real Time 11 SP4 | kernel-rt +3 | 3.0.101.rt130-48.1 | SUSE-SU-2015:2350-1 |
| SLE Real Time 11 SP3 | kernel-rt +2 | 3.0.101.rt130-0.33.44.2 | SUSE-SU-2016:0354-1 |
| SLE Real Time 11 SP3 | kernel-syms-rt | 3.0.101.rt130-0.33.44.1 | SUSE-SU-2016:0354-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12_Update_9 | 1-2.2 | SUSE-SU-2015:2194-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 | openSUSE-SU-2024:10196-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-3.8.13-118.2.2.el6uek | 0.4.5-3.el6 | ELSA-2015-3107 |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.2.2.el7uek | 0.4.5-3.el7 | ELSA-2015-3107 |
| Oracle Linux 7 | kernel-uek +5 | 3.8.13-118.2.2.el7uek | ELSA-2015-3107 |
| Oracle Linux 7 | perf +11 | 3.10.0-327.3.1.el7 | ELSA-2015-2552 |
Advisories 29
- RHSA-2015:2636 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:2587 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:2552 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2016:0004 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2016:0024 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2016:0046 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2015:2645 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-2801-1 linux vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-479-1 xen - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3396-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3414-1 xen - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3454-1 virtualbox - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2807-1 linux-lts-wily vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-2805-1 linux-lts-utopic vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-2806-1 linux-lts-vivid vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2015:2194-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2339-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2328-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2324-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2108-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:0354-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2326-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2074-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2306-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2338-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2350-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10196-1 xen-4.7.0_12-1.3 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ELSA-2015-3107 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 10, 2015
- ELSA-2015-2552 Important: kernel security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 8, 2015
References
- RHSA-2015:2636 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- FEDORA-2015-f150b2a8c8 vendor-advisory
- SUSE-SU-2015:2350 vendor-advisory
- https://kb.juniper.net/JSA10783
- DSA-3454 vendor-advisory
- [oss-security] 20151110 Re: CVE-2015-5307 kernel: kvm: guest to host DoS by triggering an infinite loop in microcode via #AC exception mailing-list
- RHSA-2015:2645 vendor-advisory
- USN-2802-1 vendor-advisory
- openSUSE-SU-2015:2250 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- USN-2806-1 vendor-advisory
- SUSE-SU-2015:2194 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed
- openSUSE-SU-2015:2232 vendor-advisory
- USN-2805-1 vendor-advisory
- http://xenbits.xen.org/xsa/advisory-156.html
- SUSE-SU-2016:0354 vendor-advisory
- FEDORA-2015-668d213dc3 vendor-advisory
- USN-2807-1 vendor-advisory
- SUSE-SU-2015:2339 vendor-advisory
- SUSE-SU-2015:2108 vendor-advisory
- USN-2801-1 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- FEDORA-2015-394835a3f6 vendor-advisory
- DSA-3414 vendor-advisory
- http://support.citrix.com/article/CTX202583
- USN-2800-1 vendor-advisory
- 1034105 vdb-entry
- SUSE-SU-2016:2074 vendor-advisory
- USN-2804-1 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1277172
- RHSA-2016:0046 vendor-advisory
- DSA-3396 vendor-advisory
- 77528 vdb-entry
- USN-2803-1 vendor-advisory
- https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed