openSUSE Security Update : the Linux Kernel (openSUSE-2020-336)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-14615: Insufficient control flow in certain data structures for some IntelR Processors with IntelR Processor Graphics may have allowed an unauthenticated user to...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:0336-1 Rating: important References: 1046303 1050244 1050549 1051510 1051858 1060463 1061840 1065600 1065729 1071995 1083647 1085030 1086301 1086313 1086314 1088810 1090888 1103989 1103990 1103991...

Xen Arm-Based CPU Speculation past the ERET Instruction (XSA-312)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a speculative memory accesses vulnerability. Some CPUs can speculate past an ERET instruction and potentially perform speculative accesses to memory before processing the exception return...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:0584-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources bsc1163971. CVE-2019-19338:...

Xen Device Quarantine for Alternate PCI Assignment Methods Privilege Escalation Vulnerability (XSA-306)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a privilege escalation vulnerability due to an incomplete fix for CVE-2019-18424. An unauthenticated attacker with physical access to the device can exploit this issue, via an untrusted...

Xen Information Disclosure Vulnerability (XSA-305)

According to its self-reported version number, the Xen Hypervisor installed on the remote host is affected by an information disclosure vulnerability. A TSX Asynchronous Abort condition exists on some CPUs utilizing speculative execution. An authenticated, local attacker can exploit this to...

Xen Denial of Service Vulnerability (XSA-304)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to an incorrect fix for CVE-2017-15595 which incorrectly drops some linearptentry counts. A local, attacker could exploit this issue, by making loops...

MGASA-2020-0110 Updated kernel packages fix security vulnerability

This update is based on upstream 5.5.6 and fixes at least the following security vulnerability: A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested=1 virtualization is enabled. In the instruction emulation, the L2 guest could trick the L0 hypervis...

Updated kernel packages fix security vulnerability

This update is based on upstream 5.5.6 and fixes at least the following security vulnerability: A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested=1 virtualization is enabled. In the instruction emulation, the L2 guest could trick the L0 hypervis...

Xen Grant Table Transfer Issues on Large Hosts Denial of Service Vulnerability (XSA-284)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. When the code processing grant table transfer requests finds a page with an address too large to be represented in the interface with the guest, it...

Xen Hypervisor Privilege Escalation

The vulnerability of Xen hypervisors is related to the improper accounting of resources from external emulators. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Xen Hypervisor Privilege Escalation

The vulnerability of the xenvifsethashmapping function in Xen hypervisors is related to integer overflow when processing requests to the netback driver. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and availability...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5542)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5542 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847137 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5543)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5543 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30944739 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

CVE-2015-5201

CVE-2015-5201 affects VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (RHEV-H) 6-6.x (before 6-6.7-20151117.0) and 7-7.x (before 7-7.2-20151119.0) as packaged before RHEV-H 3.5.6. The underlying issue occurs when VSDM runs with -spice disable-ticketing and a VM is suspended and t...

CVE-2015-5201

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows...

CVE-2020-2732

A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested=1 virtualization is enabled. In the instruction emulation, the L2 guest could trick the L0 hypervisor into accessing sensitive bits of the L1 hypervisor. An L2 guest could use this flaw to...

PT-2020-7855 · Red Hat · Red Hat Enterprise Virtualization Hypervisor +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization Hypervisor aka RHEV-H versions 6-6.x through 6-6.7-20151117.0 Red Hat Enterprise Virtualization Hypervisor aka RHEV-H versions 7-7.x through 7-7.2-20151119.0 Red Hat Enterprise Virtualization versions prior t...