48 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM – Increasing asidgeneration on CPUs when they are online to avoid ASID collisions after hotplugging. If a virtual CPU remains scheduled or blocked while the last physical CPU it was running on goes through a hotplugging...
CVE-2026-19574
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
CVE-2026-19574 ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
CVE-2026-19574 ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
CVE-2026-19574
The ARM64 MMU back-end in Zephyr (specifically in arch_mem_domain_init()) contains a vulnerability where it assigns Address Space Identifiers (ASIDs) using a round-robin counter. Because only 255 ASIDs exist, wrapping the counter allows a new memory domain to share an ASID with a still-live domai...
CVE-2026-19574
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
EUVD-2026-95528
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
CVE-2026-19574 ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
CVE-2026-19574: Improper Access Control
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
PT-2026-108758
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in arch mem domain init arch/arm64/core/mmu.c. VM ASID BITS is 8, so only 255 ASIDs exist; once the counter wrapped, arch mem domain init could hand an ASID to a new domain while a...
Linux Distros Unpatched Vulnerability : CVE-2026-90064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non- fault-mode scratch VMs Having scratch enabled does not...
DEBIAN-CVE-2026-90064
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If suc...
CVE-2026-90064
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If suc...
CVE-2026-90064 drm/xe: Reject page faults from non-fault-mode scratch VMs
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If suc...
CVE-2026-90064 drm/xe: Reject page faults from non-fault-mode scratch VMs
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If suc...
EUVD-2026-81925
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If suc...
CVE-2026-90064
CVE-2026-90064 affects the Linux kernel drm/xe driver (Intel GPU). The root cause lies in the ASID lookup for page fault handling: scratch-enabled VMs that are not in fault mode—including dma-fence mode VMs—are incorrectly admitted. When such a VM faults on an already valid VMA, the handler repor...
kernel: vhost: move vdpa group bound check to vhost_vdpa
A flaw was found in the Linux kernel's vhost subsystem. Specifically, a bug in the vdpasim component allows for an out-of-bounds write when a valid ASID Address Space ID is incorrectly assigned to a vDPA virtio Data Path Acceleration group. This could lead to memory corruption, potentially...
kernel: vhost: move vdpa group bound check to vhost_vdpa
A flaw was found in the Linux kernel's vhost subsystem. Specifically, a bug in the vdpasim component allows for an out-of-bounds write when a valid ASID Address Space ID is incorrectly assigned to a vDPA virtio Data Path Acceleration group. This could lead to memory corruption, potentially...
SUSE CVE-2026-72286
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...