CVE-2015-7969

CVE-2015-7969 describes multiple memory leak vulnerabilities in Xen versions 4.0 through 4.6.x. These flaws allow local guest administrators or domains with specific permissions to trigger a denial of service by exhausting memory through repeated "teardowns" of domains, specifically when vcpu pointer arrays are allocated via XEN_DOMCTL_max_vcpus or xenoprofile state vcpu pointer arrays are allocated via XENOPROF_get_buffer or XENOPROF_set_passive hypercalls. The vulnerability has a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C), indicating a low attack complexity where a local attacker can achieve a complete denial of service. While the EPSS score is very low, suggesting minimal exploitability in the wild, the potential impact on system availability is high. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article found, suggesting limited attention to this particular CVE.