153 matches found
Null pointer dereference
ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...
Null pointer dereference
An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtionet.c virtionetpingrxq NULL pointer dereference for vq-used...
CVE-2021-36143
ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...
CVE-2021-36143
ACRN before 2.5 contains a NULL pointer dereference in hw/pci/virtio/virtio.c (vq_endchains). Affected component is the virtio PCI backend in the hypervisor. CVSS data indicates high impact (availability loss) with network attack vector and no authentication or user interaction required; exploita...
CVE-2021-36144
The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...
CVE-2021-36144
CVE-2021-36144 affects the ACRN hypervisor prior to 2.5. The issue is described as a use-after-free involving a freed virtio device in the polling timer handler, within devicemodel/hw/pci/virtio/*.c. The connected sources confirm this root cause and timeline, but do not provide exploitation detai...
CVE-2021-36145
The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rbentry...
CVE-2021-36145
CVE-2021-36145 affects ACRN (Device Model) up to version 2.5. The issue is a use-after-free in devicemodel/core/mem.c with a freed rb_entry. CVSS details: 3.1 score 7.5 (network, low attack complexity, no privileges required, no user interaction; confidentiality/integrity impact none, availabilit...
CVE-2021-36146
CVE-2021-36146 affects ACRN before 2.5 via a NULL pointer dereference in devicemodel/hw/pci/xhci.c when handling a trb pointer. The issue is documented across multiple sources (e.g., NVD entry and CNVD/RH mirrors) confirming a null pointer dereference vulnerability in the xhci.c file of ACRN’s de...
CVE-2021-36146
ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...
CVE-2021-36147
The CVE-2021-36147 issue affects ACRN before 2.5, specifically a null pointer dereference in virtio_net_ping_rxq (devicemodel/hw/pci/virtio/virtio_net.c) on vq->used, leading to a crash/partial availability impact. Affected product: ACRN hypervisor; vulnerable component: virtio_net_ping_rxq in...
CVE-2021-36147
An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtionet.c virtionetpingrxq NULL pointer dereference for vq-used...
CVE-2021-36148
CVE-2021-36148 affects the ACRN hypervisor prior to version 2.5. The vulnerability is in dmar_free_irte (hypervisor/arch/x86/vtd.c) where an irte_alloc_bitmap buffer overflow is possible. CVSS details from the entry indicate a HIGH impact (CVSS 3.1: LOCAL access, UI required, base score 7.8) with...
CVE-2021-36148
An issue was discovered in ACRN before 2.5. dmarfreeirte in hypervisor/arch/x86/vtd.c allows an irteallocbitmap buffer overflow...
ACRN 代码问题漏洞
ACRN is an open source project released by the Linux Foundation, a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in virtionetpingrxq in devicemodel/hw/pci/virtio/virtionet.c in versions prior to ACRN 2.5. No details of the vulnerability are...
ACRN 安全漏洞
ACRN is an open source project released by the Linux Foundation, a hypervisor designed for IoT and embedded devices. An irteallocbitmap buffer overflow vulnerability exists in dmarfreeirte in hypervisor/arch/x86/vtd.c in versions prior to ACRN 2.5. No detailed vulnerability details are provided a...
ACRN 代码问题漏洞
ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in devicemodel/hw/pci/xhci.c in versions prior to ACRN 2.5. No details of the vulnerability are provided at this time...
ACRN Null Pointer Dereference Vulnerability
ACRN is an open source virtual machine monitor for the Internet of Things. ACRN suffers from a security vulnerability that stems from devicemodel/hw/pci/virtio/virtio.c null pointer dereference. No details of the vulnerability are provided at this time...
