Red Hat, Inc. (AV:A/AC:M/Au:S/C:N/I:N/A:C)

It was found that the x86 ISA (Instruction Set Architecture) is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way (sequential) delivering of benign exceptions such as #AC (alignment check exception) is handled. A privileged user inside a guest could use this flaw to create denial of service conditions on the host kernel.

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

https://access.redhat.com/errata/RHSA-2015:2552 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:2587 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:2636 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:2645 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:0004 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:0024 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:0046 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2015-5307 [No Types Assigned]

Red Hat, Inc. (AV:A/AC:M/Au:S/C:N/I:N/A:C)

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

It was found that the x86 ISA (Instruction Set Architecture) is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way (sequential) delivering of benign exceptions such as #AC (alignment check exception) is handled. A privileged user inside a guest could use this flaw to create denial of service conditions on the host kernel.

https://access.redhat.com/errata/RHSA-2015:2552 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:2587 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:2636 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:2645 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:0004 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:0024 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:0046 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2015-5307 [No Types Assigned]

OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions up to (including) 4.0.34
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions up to (including) 4.1.42
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions up to (including) 4.2.34
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions up to (including) 4.3.29
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions up to (including) 5.0.8

OR
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions from (including) 4.0.0 up to (including) 4.0.34
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions from (including) 4.1.0 up to (including) 4.1.42
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions from (including) 4.2.0 up to (including) 4.2.34
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* versions from (including) 4.3.0 up to (including) 4.3.29
     *cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* vers

OR
     *cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*
     *cpe:2.3

OR
     *cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*
     *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*
     *cpe:2.3

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html Mailing List, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html Mailing List, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html No Types Assigned

http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html No Types Assigned

http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html Mailing List, Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2636.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2015-2636.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2645.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2015-2645.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0046.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-0046.html Third Party Advisory

http://support.citrix.com/article/CTX202583 No Types Assigned

http://support.citrix.com/article/CTX202583 Third Party Advisory

http://www.debian.org/security/2015/dsa-3396 No Types Assigned

http://www.debian.org/security/2015/dsa-3396 Third Party Advisory

http://www.debian.org/security/2015/dsa-3414 No Types Assigned

http://www.debian.org/security/2015/dsa-3414 Third Party Advisory

http://www.debian.org/security/2016/dsa-3454 No Types Assigned

http://www.debian.org/security/2016/dsa-3454 Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/11/10/6 No Types Assigned

http://www.openwall.com/lists/oss-security/2015/11/10/6 Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html Vendor Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Vendor Advisory

http://www.securityfocus.com/bid/77528 No Types Assigned

http://www.securityfocus.com/bid/77528 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1034105 No Types Assigned

http://www.securitytracker.com/id/1034105 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2800-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2800-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2801-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2801-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2802-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2802-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2803-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2803-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2804-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2804-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2805-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2805-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2806-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2806-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2807-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2807-1 Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1277172 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1277172 Issue Tracking, Third Party Advisory

https://kb.juniper.net/JSA10783 No Types Assigned

https://kb.juniper.net/JSA10783 Third Party Advisory

https://kb.juniper.net/JSA10783 [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html [No Types Assigned]

http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html [No Types Assigned]

http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-2636.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-2645.html [No Types Assigned]

http://support.citrix.com/article/CTX202583 [No Types Assigned]

http://www.debian.org/security/2015/dsa-3396 [No Types Assigned]

http://www.debian.org/security/2015/dsa-3414 [No Types Assigned]

http://www.debian.org/security/2016/dsa-3454 [No Types Assigned]

http://www.securitytracker.com/id/1034105 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2800-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2801-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2802-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2803-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2804-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2805-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2806-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2807-1 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-0046.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html [No Types Assigned]

http://www.securityfocus.com/bid/77528 [No Types Assigned]

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.2.3:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.2

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.2.3:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.2

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Advisory, Patch

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:4.2.3:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
          *cpe:2.3:o:xen:xen:4.4.2

(AV:L/AC:L/Au:N/C:N/I:N/A:C)

CWE-399

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed No Types Assigned

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed Advisory

http://xenbits.xen.org/xsa/advisory-156.html No Types Assigned

http://xenbits.xen.org/xsa/advisory-156.html Advisory

https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed No Types Assigned

https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed Advisory