| Name | CVE-2015-8550 |
| Description | Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-479-1, DSA-3434-1, DSA-3471-1, DSA-3519-1 |
| Debian Bugs | 809229, 823620 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| linux (PTS) | buster | 4.19.249-2 | fixed |
| buster (security) | 4.19.304-1 | fixed | |
| bullseye | 5.10.209-2 | fixed | |
| bullseye (security) | 5.10.205-2 | fixed | |
| bookworm | 6.1.76-1 | fixed | |
| bookworm (security) | 6.1.85-1 | fixed | |
| trixie | 6.6.15-2 | fixed | |
| sid | 6.7.9-2 | fixed | |
| qemu (PTS) | buster | 1:3.1+dfsg-8+deb10u8 | fixed |
| buster (security) | 1:3.1+dfsg-8+deb10u12 | fixed | |
| bullseye | 1:5.2+dfsg-11+deb11u3 | fixed | |
| bullseye (security) | 1:5.2+dfsg-11+deb11u2 | fixed | |
| bookworm | 1:7.2+dfsg-7+deb12u5 | fixed | |
| trixie | 1:8.2.1+ds-2 | fixed | |
| sid | 1:8.2.2+ds-2 | fixed | |
| xen (PTS) | buster, buster (security) | 4.11.4+107-gef32c7afa2-1 | fixed |
| bullseye | 4.14.6-1 | fixed | |
| bullseye (security) | 4.14.5+94-ge49571868d-1 | fixed | |
| bookworm | 4.17.3+10-g091466ba55-1~deb12u1 | fixed | |
| trixie | 4.17.3+10-g091466ba55-1 | fixed | |
| sid | 4.17.3+36-g54dacb5c02-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| linux | source | experimental | 4.4~rc6-1~exp1 | |||
| linux | source | wheezy | 3.2.73-2+deb7u2 | DSA-3434-1 | ||
| linux | source | jessie | 3.16.7-ckt20-1+deb8u2 | DSA-3434-1 | ||
| linux | source | (unstable) | 4.3.3-3 | |||
| linux-2.6 | source | (unstable) | (unfixed) | |||
| qemu | source | squeeze | (not affected) | |||
| qemu | source | wheezy | (not affected) | |||
| qemu | source | jessie | 1:2.1+dfsg-12+deb8u5a | DSA-3471-1 | ||
| qemu | source | (unstable) | 1:2.5+dfsg-2 | 809229 | ||
| qemu-kvm | source | squeeze | (not affected) | |||
| qemu-kvm | source | wheezy | (not affected) | |||
| qemu-kvm | source | (unstable) | (unfixed) | |||
| xen | source | squeeze | (unfixed) | end-of-life | ||
| xen | source | wheezy | 4.1.6.1-1+deb7u1 | DLA-479-1 | ||
| xen | source | jessie | 4.4.1-9+deb8u4 | DSA-3519-1 | ||
| xen | source | (unstable) | 4.8.0~rc3-1 | 823620 |
[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
[wheezy] - qemu <not-affected> (vulnerable code not present)
[squeeze] - qemu <not-affected> (vulnerable code not present)
[wheezy] - qemu-kvm <not-affected> (vulnerable code not present)
[squeeze] - qemu-kvm <not-affected> (vulnerable code not present)
[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
http://xenbits.xen.org/xsa/advisory-155.html
https://git.kernel.org/linus/454d5d882c7e412b840e3c99010fe81a9862f6fb
https://git.kernel.org/linus/0f589967a73f1f30ab4ac4dd9ce0bb399b4d6357
https://git.kernel.org/linus/68a33bfd8403e4e22847165d149823a2e0e67c9c
https://git.kernel.org/linus/1f13d75ccb806260079e0679d55d9253e370ec8a
https://git.kernel.org/linus/18779149101c0dd43ded43669ae2a92d21b6f9cb
https://git.kernel.org/linus/be69746ec12f35b484707da505c6c76ff06f97dc
https://git.kernel.org/linus/8135cf8b092723dbfcc611fe6fdcb3a36c9951c5