CVE-2025-23141

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...

CVE-2025-23141 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...

CVE-2025-23141

CVE-2025-23141: In the Linux kernel KVM x86, acquiring the SRCU lock when retrieving MP state (KVM_GET_MP_STATE) can trigger a nested VM-Exit and potentially access guest memory in edge cases (e.g., L2 with INIT and pending TRIPLE_FAULT). The issue arises when the vCPU handling of MP state intera...

USN-7428-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

PT-2025-18395

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc3 Description A vulnerability in the Linux kernel has been resolved, specifically in the KVM Kernel-based Virtual Machine module. The issue arises when the vCPU is in L2 with INIT and a TRIPLE FAULT...

Linux Distros Unpatched Vulnerability : CVE-2022-49562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Use trycmpxchguser to update guest PTE A/D bits Use the recently introduced trycmpxchguser to update guest PTE A/D bits instead of mapping the PTE int...

Linux Distros Unpatched Vulnerability : CVE-2018-1059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical...

SUSE CVE-2022-49562

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use trycmpxchguser to update guest PTE A/D bits Use the recently introduced trycmpxchguser to update guest PTE A/D bits instead of mapping the PTE into kernel address space. The VMPFNMAP path is broken as it assumes tha...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver, which originates from kernel software installed and running in a Guest VM that may be able to leverage memory shared with the GPU firmware to write data to another Guest's...

CVE-2023-20581

Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity...

CVE-2023-20582

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry PTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity...

CVE-2023-20581

Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity...

CVE-2023-20582

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry PTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity...

CVE-2023-20581

Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity...

CVE-2023-20581

CVE-2023-20581 concerns improper access control in the IOMMU, potentially allowing a privileged attacker to bypass RMP checks and compromise guest memory integrity. The vulnerability is associated with AMD IOMMU/ASP components in AMD platforms, with exploitation classified as LOCAL and requiring ...

PT-2025-6395 · Amd · Sev-Snp

Name of the Vulnerable Software and Affected Versions: SEV-SNP affected versions not specified Description: The issue is related to the improper handling of invalid nested page table entries in the IOMMU, which may allow a privileged attacker to induce page table entry PTE faults. This could...

PT-2025-6394 · Iommu · Iommu

Name of the Vulnerable Software and Affected Versions: IOMMU affected versions not specified Description: The issue is related to improper access control in the IOMMU, which may allow a privileged attacker to bypass RMP checks. This could potentially lead to a loss of guest memory integrity...

PT-2025-37188

Name of the Vulnerable Software and Affected Versions Xen versions affected versions not specified Description The issue concerns a cross-platform hypervisor, Xen, within the Linux operating system kernel. It relates to synchronization errors when a shared resource is used, and a race condition...

PT-2025-37186

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description The vulnerability is awaiting analysis. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-37187

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The vulnerability is awaiting analysis. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...