PT-2021-26081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to a potential VPE leak on error in the irqchip/gic-v3-its component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to a potential VPE leak on error in the irqchip/gic-v3-its component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

GSD-2021-1000179 irqchip/gic-v3: Do not enable irqs when handling spurious interrups

irqchip/gic-v3: Do not enable irqs when handling spurious interrups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

GSD-2021-1000077 irqchip/gic-v3: Do not enable irqs when handling spurious interrups

irqchip/gic-v3: Do not enable irqs when handling spurious interrups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000115 irqchip/gic-v3: Do not enable irqs when handling spurious interrups

irqchip/gic-v3: Do not enable irqs when handling spurious interrups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000077 irqchip/gic-v3: Do not enable irqs when handling spurious interrups

irqchip/gic-v3: Do not enable irqs when handling spurious interrups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

PT-2021-24623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-28544

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.12.3 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual...

PT-2021-28646

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-28582

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-28617

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that irqs should not be enabled when handling such interrupts. The actual impact...

PT-2021-24550

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.1 through v5.12.3 Description: The issue is related to the handling of spurious interrupts in the irqchip/gic-v3 component. It was introduced in version v5.1 and fixed in version v5.12.3. The actual impact and attack...

PT-2021-24652

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the handling of spurious interrupts in the irqchip/gic-v3 component. It may potentially allow for security vulnerabilities, although the actual impact and attack...

PT-2021-24588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-8271 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 4.19.95.aarch64 and earlier Description: The vulnerability is related to the handling of spurious interrupts in the Linux kernel. When a spurious interrupt occurs, the kernel should not enable interrupts, but in this cas...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2003)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2003 advisory. - fs xfs: Fix possible memory corruption in xfsreadlink Carlos Maiolino CVE-2011-4077 - crypto: ghash - Avoid null pointer dereference if no key is...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2013)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2013 advisory. - KVM: Ensure all vcpus are consistent with in-kernel irqchip settings Avi Kivity Bugdb: 13871 CVE-2012-1601 Tenable has extracted the preceding...

Oracle Linux 5 : kvm (ELSA-2012-0051)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0051 advisory. - Resolves: bz772079 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-5.7.z - Resolves: bz770100...

kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency

The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service NULL pointer dereference and host OS crash by making a KVMCREATEIRQCHIP ioctl call after a virtual CPU already exists...