CVE-2015-0239

CVE-2015-0239 describes a privilege escalation and denial-of-service vulnerability in the Linux kernel's KVM virtualization component, specifically affecting versions before 3.18.5. This flaw allows a guest OS user to gain guest OS privileges or crash the guest OS by exploiting improper SYSENTER instruction emulation when the guest OS lacks SYSENTER MSR initialization. With a CVSS score of 4.4, it is considered a medium-severity vulnerability, requiring local access and moderate attack complexity to achieve partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.