Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000239 advisory. An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the...

6.1CVSS7AI score0.00023EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2025/07/28 11:21 a.m.3 views

CVE-2025-38469

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...

5.5CVSS5.3AI score0.00077EPSS
Exploits0
OSV
OSV
added 2025/07/28 11:21 a.m.1 views

CVE-2025-38469 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...

5.5CVSS5.9AI score0.00077EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.3 views

SUSE CVE-2012-0045

The emsyscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 aka syscall opcode, which allows guest OS users to cause a denial of service guest OS crash via a crafted application, as demonstrated by an NASM file...

4.7CVSS6.3AI score0.0078EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.1 views

SUSE CVE-2015-0239

The emsysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service guest OS crash by triggering use of a 16-bit code segment for emulation of a...

4.4CVSS7AI score0.00101EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:47 a.m.1 views

SUSE CVE-2017-7518

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to...

5.3CVSS7.6AI score0.0009EPSS
Exploits0References9
OSV
OSV
added 2022/09/17 1:16 a.m.7 views

GSD-2022-1006321 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2018/07/30 3:29 p.m.1 views

DEBIAN-CVE-2017-7518

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to...

7.8CVSS6.3AI score0.0009EPSS
Exploits0References1
Oracle linux
Oracle linux
added 2017/05/16 12:0 a.m.81 views

Unbreakable Enterprise kernel security update

2.6.39-400.295.2 - nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce Fields Orabug: 25986995 CVE-2017-7895 2.6.39-400.295.1 - ocfs2/o2net: o2netlistendataready should do nothing if socket state is not TCPLISTEN Tariq Saeed Orabug: 25510857 - IB/CORE: sync the resouce access in fmrpool...

10CVSS8.4AI score0.21519EPSS
Exploits41
OpenVAS
OpenVAS
added 2017/02/21 12:0 a.m.38 views

Debian: Security Advisory (DSA-3791-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.20044EPSS
Exploits13References3
OSV
OSV
added 2016/11/24 1:31 p.m.9 views

SUSE-SU-2016:2902-1 Security update for kvm

This update for kvm fixes the following issues: - Address various security/stability issues Fix OOB access in xlnx.xpx-ethernetlite emulation CVE-2016-7161 bsc1001151 Fix OOB access in VMware SVGA emulation CVE-2016-7170 bsc998516 Fix DOS in ColdFire Fast Ethernet Controller emulation CVE-2016-79...

10CVSS5.6AI score0.16707EPSS
Exploits0References35
RedHat Linux
RedHat Linux
added 2016/05/10 6:43 p.m.2 views

kernel: kvm: reporting emulation failures to userspace

It was found that reporting emulation failures to user space could lead to either a local CVE-2014-7842 or a L2-L1 CVE-2010-5313 denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. Please note that on certain...

4.9CVSS6.6AI score0.00052EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2015/02/27 12:0 a.m.33 views

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2513-1)

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

6.9CVSS6.8AI score0.02449EPSS
Exploits4References9
Ubuntu
Ubuntu
added 2015/02/26 11:22 a.m.70 views

USN-2516-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

7.8CVSS6.8AI score0.02949EPSS
Exploits4
Ubuntu
Ubuntu
added 2015/02/26 11:18 a.m.71 views

USN-2515-1: Linux kernel (Trusty HWE) vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

7.8CVSS6.8AI score0.02949EPSS
Exploits4
Ubuntu
Ubuntu
added 2015/02/26 11:13 a.m.72 views

USN-2514-1: Linux kernel (OMAP4) vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

6.9CVSS6.8AI score0.02449EPSS
Exploits4
Ubuntu
Ubuntu
added 2015/02/26 11:9 a.m.71 views

USN-2513-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

6.9CVSS6.8AI score0.02449EPSS
Exploits4
Rows per page
Query Builder