Lucene search
+L

64 matches found

Prion
Prion
•added 2022/03/10 8:15 p.m.•38 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/10 8:15 p.m.•31 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/10 8:15 p.m.•32 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/10 8:15 p.m.•38 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/10 8:15 p.m.•37 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/10 8:15 p.m.•45 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/10 8:15 p.m.•31 views

Race condition

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

4.4CVSS6.7AI score0.00365EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2022/03/10 7:20 p.m.•94 views

CVE-2022-23042

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.8AI score0.00254EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/03/10 7:20 p.m.•45 views

CVE-2022-23041

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7.5AI score0.00365EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/10 7:20 p.m.•259 views

CVE-2022-23041

The connected Astra Linux entries link CVE-2022-23041 to Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) that use grant-table interfaces to drop backend access. The issue arises from race conditions when removing grant access: if a backend has mapped the granted page b...

7CVSS7.3AI score0.00365EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/10 7:20 p.m.•52 views

CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7.5AI score0.00365EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/10 7:20 p.m.•221 views

CVE-2022-23040

The CVE entry relates to Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus, etc.) and the grant-table race conditions CVEs 2022-23036 to 2022-23042. The root cause is improper synchronization when removing granted access or freeing grant references, allowing a backend to ...

7CVSS7.3AI score0.00365EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2022/03/10 7:20 p.m.•90 views

CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.8AI score0.00365EPSS
SaveExploits0
CVE
CVE
•added 2022/03/10 7:20 p.m.•236 views

CVE-2022-23039

Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) are vulnerable to race conditions in grant-reference handling that can allow a backend to retain access to guest memory after grant removal or reuse, potentially causing data leakage, data corruption, or DoS. The issue sp...

7CVSS7.3AI score0.00365EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/10 7:20 p.m.•55 views

CVE-2022-23037

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7.5AI score0.00348EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/03/10 7:20 p.m.•63 views

CVE-2022-23037

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.8AI score0.00348EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/10 7:20 p.m.•84 views

CVE-2022-23036

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.8AI score0.00365EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2022/03/10 12:00 a.m.•81 views

CVE-2022-23036

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.5AI score0.00365EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/03/10 12:00 a.m.•260 views

CVE-2022-23042

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.5AI score0.00254EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/03/10 12:00 a.m.•66 views

CVE-2022-23041

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

7CVSS6.5AI score0.00365EPSS
SaveExploits0References9
Rows per page
Query Builder