CVE-2015-8552

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."

• CWE-20

• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
• http://www.debian.org/security/2016/dsa-3434
• http://www.securityfocus.com/bid/79546Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034480Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-157.htmlVendor Advisory
• https://security.gentoo.org/glsa/201604-03
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
• http://www.debian.org/security/2016/dsa-3434
• http://www.securityfocus.com/bid/79546Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034480Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-157.htmlVendor Advisory
• https://security.gentoo.org/glsa/201604-03

Published

Apr 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8546An issue was discovered on Samsung mobile devices with softw…9.8
• CVE-2015-8547The CoreUserInputHandler::doMode function in core/coreuserin…
• CVE-2015-8548Multiple unspecified vulnerabilities in Google V8 before 4.7…
• CVE-2015-8549XML external entity (XXE) vulnerability in PyAMF before 0.8.…7.1
• CVE-2015-8550Xen, when used on a system providing PV backends, allows loc…
• CVE-2015-8551The PCI backend driver in Xen, when running on an x86 system…6
• CVE-2015-8553Xen allows guest OS users to obtain sensitive information fr…6.5
• CVE-2015-8554Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, whe…
• CVE-2015-8555Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initializ…
• CVE-2015-8556Local privilege escalation vulnerability in the Gentoo QEMU …
• CVE-2015-8557The FontManager._get_nix_font_path function in formatters/im…
• CVE-2015-8558The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU a…5.5