CVE-2009-3640

CVE-2009-3640 affects the Linux kernel KVM component (arch/x86/kvm/x86.c). The update_cr8_intercept function does not properly handle missing APIC, causing a local denial of service via a NULL pointer dereference and, potentially, privilege escalation through kvm_vcpu_ioctl. Affected: kernels bef...

CVE-2009-3638

CVE-2009-3638 affects the Linux kernel KVM subsystem: integer overflow in kvm_dev_ioctl_get_supported_cpuid (arch/x86/kvm/x86.c) allows local users to trigger an unspecified impact via KVM_GET_SUPPORTED_CPUID requests. Affected versions are Linux kernels before 2.6.31.4. Remediation is to upgrade...

CVE-2009-3638

Integer overflow in the kvmdevioctlgetsupportedcpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVMGETSUPPORTEDCPUID request to the kvmarchdevioctl function...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:289)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easi...

DSA-1915-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

DTSA-203-1 kvm - several vulnerabilities

Bulletin has no description...

Debian: Security Advisory (DSA-1907-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1907-1 (kvm)

The remote host is missing an update to kvm announced via advisory DSA 1907-1. OpenVAS Vulnerability Test $Id: deb19071.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1907-1 kvm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1907-1] New kvm packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1907-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 13, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1907-1] New kvm packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1907-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 13, 2009 http://www.debian.org/security/faq -...

DSA-1907-1 kvm - several vulnerabilities

Bulletin has no description...

kvm privilege escalation

kvmemulatehypercall doesn't filter MMU hypercalls from ring 0...

SLES11: Security update for KVM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kvm kvm-kmp-default kvm-kmp-pae More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for KVM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kvm kvm-kmp-default kvm-kmp-pae More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

RedHat Security Advisory RHSA-2009:1465

The remote host is missing updates announced in advisory RHSA-2009:1465. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. The kvmemulatehypercall...

RedHat Security Advisory RHSA-2009:1465

The remote host is missing updates announced in advisory RHSA-2009:1465. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. The kvmemulatehypercall...

kvm security and bug fix update

83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...

kernel security and bug fix update

2.6.18-164.2.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 23rd February 2010 This update adds references to two KBase articles...

kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...