CVE-2015-7513

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.

Published: Feb 8, 2016
Updated: Nov 9, 2025
CVE: CVE-2015-7513
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.9
AV:L/AC:L/Au:N/C:N/I:N/A:C

CWEs:

CWE-369

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	4.4-rc6	4.4-rc6.x
linux / linux_kernel	4.4-rc5	4.4-rc5.x
linux / linux_kernel	4.4-rc4	4.4-rc4.x
linux / linux_kernel	4.4-rc3	4.4-rc3.x
linux / linux_kernel	4.4-rc2	4.4-rc2.x
linux / linux_kernel	4.4-rc1	4.4-rc1.x
linux / linux_kernel	4.4	4.4.x
linux / linux_kernel	-	4.4
fedoraproject / fedora	22	22.x
debian / debian_linux	8.0	8.0.x
debian / debian_linux	7.0	7.0.x
fedoraproject / fedora	23	23.x
canonical / ubuntu_linux	15.10	15.10.x
canonical / ubuntu_linux	15.04	15.04.x
canonical / ubuntu_linux	14.04	14.04.x
canonical / ubuntu_linux	12.04	12.04.x

Vulnerability Database

314,373

CVE-2015-7513

Deep Security Visibility Without the Complexity