8655 matches found
An EPYC escape: Case-study of a KVM breakout
Posted by Felix Wilhelm, Project Zero Introduction KVM for Kernel-based Virtual Machine is the de-facto standard hypervisor for Linux-based cloud environments. Outside of Azure, almost all large-scale cloud and hosting providers are running on top of KVM, turning it into one of the fundamental...
OESA-2021-1241 qemu security update
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host,...
The vulnerability in the `arch/arm/mach-footbridge/personal-pci.c` component of the Linux operating system allows a attacker to disclose sensitive information or cause service failures.
The vulnerability in the arch/arm/mach-footbridge/personal-pci.c component of the Linux operating system relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative e.g. access to element -2 of an array aka CID-298a58e165e4.
...
qemu: out-of-bound heap buffer access via an interrupt ID field
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating...
CVE-2021-34387
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...
Design/Logic Flaw
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...
CVE-2021-34387
CVE-2021-34387 affects NVIDIA Jetson Trusty TLK/Trusty on TrustZone. The vulnerability arises from access permission settings where the DRAM region reserved for TrustZone is identity-mapped by the TLK with read, write, and execute permissions, allowing write access to kernel code and data that sh...
Kconfig-Hardened-Check - A Tool For Checking The Hardening Options In The Linux Kernel Config
Motivation There are plenty of Linux kernel hardening config options. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs manually. So let the computers do their job!...
Linux kernel out-of-bounds read vulnerability (CNVD-2021-53933)
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. An out-of-bounds read vulnerability exists in arch/arm/mach-footbridge/personal-pci.c of the Linux kernel, which stems from a lack of checking for values that should not be negative. No details of th...
DEBIAN-CVE-2021-32078
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
AZL-6559 CVE-2021-32078 affecting package kernel for versions less than 5.15.2.1-1
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
CVE-2021-32078
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
UBUNTU-CVE-2021-32078
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
Design/Logic Flaw
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
CVE-2021-32078
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
Linux kernel 缓冲区错误漏洞
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. An out-of-bounds read vulnerability exists in arch/arm/mach-footbridge/personal-pci.c of the Linux kernel, which stems from a lack of checking for values that should not be negative. No details of th...
PT-2024-11326 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference counting issue in the Linux kernel's iommu/arm-smmu component causes a refcount leak when arm smmu rpm get fails. The arm smmu rpm get function invokes pm runtime get sync,...
PT-2024-11324 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference counting issue occurs in the Linux kernel's iommu/arm-smmu component, specifically in the arm smmu iova to phys hard function. This issue arises when error scenarios occur ...
SUSE: Security Advisory (SUSE-SU-2021:0521-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...