13553 matches found
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching bsc1242006. CVE-2024-35840: mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect bsc122459...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify that the target vCPU is online in kvmgetvcpu It is necessary to explicitly verify that the target vCPU is fully online prior to clamping the index in kvmgetvcpu. If the index is “bad”, the nospec clamping...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several issues with the way the hyp code lazily saves the host’s FPSIMD/SVE state. These include: The host SVE state is unexpectedly discarded due to...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Resets the IRTE to host control if the new route cannot be posted. Restores an IRTE back to host control either remapped or in MSI mode if the new GSI route prevents direct posting of the IRQ to a vCPU, regardless of th...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with the guest value only before entering the .vcpurun loop. Move the conditional loading of hardware DR6 with the guest’s DR6 value out of the core .vcpurun loop to fix a bug where KVM may load hardware with a...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: idpf: fixed the issue where the NULL pointer dereferencing occurred during reboot. When SRIOV is enabled, idpf calls idpfremove twice. First, via idpfshutdown, and then again when idpfremove calls sriovdisable. This is because...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fixed the flushtlbrange function when it is used to zap normal PMD entries PMD entries that point to page tables, along with the PTE entries in the pointed-to page table. In the arm64 version of flushtlbrange, there is a...
Astra Linux – Vulnerability in amd64-microcode
Improper signature verification in the AMD CPU ROM microcode patch loader may allow an attacker with local administrator privileges to load malicious CPU microcode, resulting in a loss of confidentiality and integrity for confidential guests running under AMD SEV-SNP...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: The mask PEBSENABLE must be set for the guest when the value of vCPU is used. When generating the MSRIA32PEBSENABLE value that will be loaded on the VM-Entry to a KVM guest, the value should be masked with th...
SUSE-SU-2025:20408-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer...
SUSE-SU-2025:20419-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer...
[SECURITY] Fedora 41 Update: libkrun-1.13.0-1.fc41
Dynamic library providing Virtualization-based process isolation capabilities...
[SECURITY] Fedora 41 Update: rust-sev-6.1.0-2.fc41
Library for AMD SEV...
[SECURITY] Fedora 42 Update: rust-sev-6.1.0-2.fc42
Library for AMD SEV...
[SECURITY] Fedora 42 Update: libkrun-1.13.0-1.fc42
Dynamic library providing Virtualization-based process isolation capabilities...
On the Impossibility of a Perfect Hypervisor
We establish a fundamental impossibility result for a perfect hypervisor', one that 1 preserves every observable behavior of any program exactly as on bare metal and 2 adds zero timing or resource overhead. Within this model we prove two theorems. 1 Indetectability Theorem. If such a hypervisor...
CVE-2025-47969 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
...
CVE-2025-47969
CVE-2025-47969 is a Windows Hello information-disclosure vulnerability. It affects Windows Hello components and enables a local attacker with high privileges to disclose sensitive data via the Windows Hello flow. The CVSS vector indicates Local access, low attack complexity, and high confidential...
