PT-2022-33765 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a potential buffer overflow caused by the snprintf function in the ASoC: SOF: Intel: hda driver. The actual impact and attack plausibility have not yet been proven...

CVE-2021-3611

A stack overflow vulnerability was found in the Intel HD Audio device intel-hda of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects...

CVE-2021-3611: Improper Restriction of Operations within the Bounds of a Memory Buffer

A stack overflow vulnerability was found in the Intel HD Audio device intel-hda of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects...

PT-2021-30735

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.162 Description A potential locking issue was identified in the ASoC SOF Intel hda-dai driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26811

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.5 Description: A potential locking issue has been identified in the ASoC: SOF: Intel: hda-dai component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: Fo...

PT-2021-26766

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.82 Description: A potential locking issue was identified in the ASoC: SOF: Intel: hda-dai component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-26740

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.162 Description: A potential locking issue was identified in the ASoC SOF Intel hda-dai driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-30806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.5 Description A potential locking issue was identified in the ASoC: SOF: Intel: hda-dai component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-30761

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.82 Description A potential locking issue was identified in the ASoC SOF Intel hda-dai component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2591-1 Rating: important References: 1176681 1185591 1186290 1187364 1187365 1187366 1187367 1187499 1187529 1187538 1187539 Cross-References: CVE-2020-25085 CVE-2021-3582 CVE-2021-3592 CVE-2021-3593 CVE-2021-359...

openSUSE: Security Advisory for qemu (openSUSE-SU-2021:2474-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2474-1 Rating: important References: 1187364 1187365 1187366 1187367 1187499 1187529 1187538 1187539 Cross-References: CVE-2021-3582 CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 CVE-2021-3607...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2442-1 Rating: important References: 1187499 1187529 1187538 1187539 Cross-References: CVE-2021-3582 CVE-2021-3607 CVE-2021-3608 CVE-2021-3611 CVSS scores: CVE-2021-3582 SUSE: 3.2...

Qemu: audio: intel-hda: infinite loop in processing dma buffer stream

The intelhdaxfer function in hw/audio/intel-hda.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via an entry with the same value for buffer length and pointer position...

Security update for xen (important)

This updates xen to version 4.4.406 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable...

SUSE SLES11 Security Update : kvm (SUSE-SU-2016:2902-1)

This update for kvm fixes the following issues : - Address various security/stability issues - Fix OOB access in xlnx.xpx-ethernetlite emulation CVE-2016-7161 bsc1001151 - Fix OOB access in VMware SVGA emulation CVE-2016-7170 bsc998516 - Fix DOS in ColdFire Fast Ethernet Controller emulation...

DEBIAN-CVE-2016-8909

The intelhdaxfer function in hw/audio/intel-hda.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via an entry with the same value for buffer length and pointer position...

ALPINE-CVE-2016-8909

The intelhdaxfer function in hw/audio/intel-hda.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via an entry with the same value for buffer length and pointer position...

UBUNTU-CVE-2016-8909

The intelhdaxfer function in hw/audio/intel-hda.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via an entry with the same value for buffer length and pointer position...

PT-2016-7616

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and CPU consumption. This is achieved by exploiting the intel hda xf...