kernel: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction

A compatibility issue was found between Linux and Hyper-V when Indirect Branch Tracking IBT is enabled. The Hyper-V hypercall page lacks the required ENDBR64 instruction, causing all hypercalls to fail with an exception and panic the guest...

Windows Hyper-V Denial of Service Vulnerability

...

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

...

PT-2024-8158

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to the storage of confidential data in incorrectly locked memory, which can be exploited to cause a denial of service. This allows attackers to affect the syste...

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2024-43624: Untrusted Pointer Dereference

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...

CVE-2024-43633: Sensitive Data Storage in Improperly Locked Memory

Windows Hyper-V Denial of Service Vulnerability...

PT-2024-8086

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V Shared Virtual Disk affected versions not specified Description: The issue is related to the Windows Hyper-V Shared Virtual Disk and involves the dereferencing of an untrusted pointer. This can allow an attacker to elevate the...

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...

PT-2024-36849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Hyper-V HID driver in the Linux kernel. When unloading the 'hid hyperv' module, a devres complaint occurs due to the corresponding devres group not being...

x86/hyperv: fix kexec crash due to VP assist page corruption

...

The vulnerability of the hv_netvsc component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hvnetvsc component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 6 : qemu-kvm-rhev (RHSA-2014:0434)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0434 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

WS-2022-0132

The parser in Hyper before 0.14.12 creates invalid uninitialized value. Affected versions of this crate called mem::uninitialized in the HTTP1 parser to create values of type httparse::Header from the httparse crate. This is unsound, since Header contains references and thus must be non-null...

WS-2022-0412

Path resolution in hyper-staticfile didn't correctly validate Windows paths, meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem. This on...

NVIDIA D3D10 Driver Shader Functionality MOV instruction out-of-bounds read vulnerability

Talos Vulnerability Report TALOS-2024-2015 NVIDIA D3D10 Driver Shader Functionality MOV instruction out-of-bounds read vulnerability October 23, 2024 CVE Number CVE-2024-0119 SUMMARY An out-of-bounds read vulnerability exists in the Shader Functionality functionality of NVIDIA D3D10 Driver 555.99...

NVIDIA D3D10 Driver Shader Functionality out-of-bounds read vulnerability due to excessive loop iteration

Talos Vulnerability Report TALOS-2024-2013 NVIDIA D3D10 Driver Shader Functionality out-of-bounds read vulnerability due to excessive loop iteration October 23, 2024 CVE Number CVE-2024-0118 SUMMARY An out-of-bounds read vulnerability exists in the Shader Functionality functionality of NVIDIA D3D...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : ICONICS, Mitsubishi Electric Equipment : ICONICS Product Suite, Mitsubishi Electric MC Works64 Vulnerability : Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Fedora: Security Advisory (FEDORA-2024-bf524bf5c0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-ff98facbc6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...