Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-32955)

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...

Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-32476)

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the AhciBusDxe shared buffer used by SMM and non- SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using IOMMU...

ALSA-2023:5069 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel 5.14.0. Security Fixes: kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch...

PT-2025-43109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to ACPI handling during system sleep state transitions s2idle. Specifically, the kernel does not adequately handle multiple ACPI TYPE PACKAGE...

PT-2023-36703

Уязвимость функции vmbus acpi add модуля drivers/hv/vmbus drv.c драйвера гостевого режима Microsoft HyperV ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-41091

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s VMBus client driver has an issue where it attempts to access resources of the ACPI namespace root object, which has an all-ones handle. This can lead to a NULL pointer...

PT-2023-27359 · Lenovo · Lenovo Thinkpad

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkPad affected versions not specified Description: A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to...

PT-2025-38374

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-dev-th500-6.0.y-1+bcf8c46459e407-generic-64k Description The Linux kernel contains a flaw within the ACPICA component related to the handling of ASL Timer instructions. Specifically, the issue arises when...

USN-6167-1: QEMU vulnerabilities

It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. A malicious guest driver could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubunt...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : QEMU vulnerabilities (USN-6167-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6167-1 advisory. It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. ...

EulerOS Virtualization 2.11.0 : qemu (EulerOS-SA-2023-2134)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Bloc...

kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...

AlmaLinux 9 : qemu-kvm (ALSA-2023:2162)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2162 advisory. - An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use...

RHEL 9 : qemu-kvm (RHSA-2023:2162)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2162 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record

An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table ERST device of QEMU in the readerstrecord and writeerstrecord functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could...

Unbreakable Enterprise kernel security update

5.15.0-101.103.2.1 - Revert 'attr: use consistent sgid stripping checks' Sherry Yang Orabug: 35346968 - Revert 'iommu: Force iommu shutdown on panic' Boris Ostrovsky Orabug: 35346963 5.15.0-101.103.2 - uek-rpm: mod-extra: Remove mt7921e.ko from extras list Harshit Mogalapalli Orabug: 34999685 -...

ALSA-2023:2162 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm 7.2.0...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do all initialization before exposing /dev/kvm to userspace CVE-2022-49932 A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege...

PT-2024-20618

Name of the Vulnerable Software and Affected Versions ACPI affected versions not specified Description The memory allocation function ACPI ALLOCATE ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null...

Oracle Linux 8 : virt:kvm_utils2 (ELSA-2023-12195)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12195 advisory. - hw/pvrdma: Protect against buggy or malicious guest driver Yuval Shaia Orabug: 35064352 CVE-2022-1050 - hw/display/qxl: Avoid buffer overrun in...