CVE-2015-7972

CVE-2015-7972 is a denial-of-service vulnerability affecting Xen versions 3.4.x through 4.6.x. Specifically, the libxl_set_memory_target and libxl__build_post functions in Xen's libxl library fail to correctly calculate balloon size when using the populate-on-demand (PoD) system. This flaw allows local HVM guest users to trigger a guest crash under heavy memory pressure. The vulnerability has a low CVSS score of 2.1, indicating a low severity. It requires local access (AV:L) and low attack complexity (AC:L), with no authentication needed (Au:N), leading to a partial availability impact (A:P) but no confidentiality or integrity impact. There is no evidence of active exploitation, and no exploit code is publicly available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article, suggesting low overall attention.