drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.

References

• https://nvd.nist.gov/vuln/detail/CVE-2015-0777
• https://bugzilla.novell.com/show_bug.cgi?id=917830
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html
• http://www.securityfocus.com/bid/73921