4568 matches found
CVE-2026-89927: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock Fix an issue where userspace or the guest can program an Hyper-V synthetic timer to have a deadline in the past via integer overflow, preventing the CPU from making...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fixed an address space leak when the Hyper-V DRM device is removed. When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram and maps it as cacheable. If the device is removed, or if the devic...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them as SCSI devices in a guest VM. I/O to the vFC device is handled by the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Do not dereference the ACPI root object handle Since the commit referenced in the Fixes section below the VMBus client driver attempts to traverse the ACPI namespace from the VMBus ACPI device to the ACPI...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: x86/hyperv: Fixed a NULL dereferencing in sethvtscchangecb if the Hyper-V setup fails. Checked for a valid hvvpindex array before dereferencing hvvpindex when setting Hyper-V’s TSC change callback. If Hyper-V setup fails in...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: clocksource: hyper-v: unexport init-annotated hvinitclocksource EXPORTSYMBOL and init are a poor combination, as the .init.text section is freed after initialization. As a result, modules cannot use symbols annotated with init...
Astra Linux – Vulnerability in hdf5
A SIGFPE signal is raised in the function H5Dcreatechunkfilemaphyper of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempt to parse a crafted HDF file. This occurs due to incorrect protection against division by zero. This could allow a remote denial-of-service attack...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: scsi: storvsc: Fixed scheduling while atomic on PREEMPTRT This resolved the issue of lock-up and other problems that occurred when running with PREEMPTRT enabled on Hyper-V: 415.140818 BUG: Scheduling while atomic:...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fixed potential crashes during module unloading. The vmbus driver relies on the panic notifier infrastructure to perform certain operations when a panic event is detected. Since vmbus can be built as a module,...
CVE-2026-80083
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-72961
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-69910
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
CVE-2026-69603
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-69553
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network...
CVE-2026-69910
Windows Hyper-V is affected by a stack-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over the network without any privileges or user interaction. The vulnerability is rated CVSS 9.8 (Critical) by Microsoft, with high impact to confidentiality, integri...
EUVD-2026-73690
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
CVE-2026-72961
CVE-2026-72961 is an out-of-bounds read vulnerability in Windows Hyper-V that allows a local, authorized attacker to elevate privileges. The CVSS 3.1 score is 8.2 (HIGH) , with a vector of AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating that exploitation requires existing high privileges on the s...
EUVD-2026-73676
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-80083
CVE-2026-80083 is an untrusted pointer dereference in Windows Hyper-V that allows an authorized local attacker to execute code, with changed scope (privilege escape). The CVSS 3.1 score is 8.8 (HIGH) (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting high impact to confidentiality, integrity, and ...