CVE-2021-4032

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...

UBUNTU-CVE-2021-4032

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...

PT-2021-7295 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15 rc7 Description: The issue is related to incomplete cleanup of temporary or auxiliary resources in the arch/x86/kvm/lapic.c component of the Kernel-based Virtual Machine KVM subsystem in the Linux kernel...

UVI-2021-1001050 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001050 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1000973 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000973 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000913 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

GSD-2021-1000913 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

SUSE: Security Advisory (SUSE-SU-2019:13962-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : kvm (SUSE-SU-2019:13962-1)

This update for kvm fixes the following issues : Security issues fixed : CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation bsc1123156. CVE-2018-19489: Fixed a denial of service vulnerability in virtfs bsc1117275. CVE-2018-19364: Fixed a use-after-free if the...

SUSE-SU-2019:13962-1 Security update for kvm

This update for kvm fixes the following issues: Security issues fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation bsc1123156. - CVE-2018-19489: Fixed a denial of service vulnerability in virtfs bsc1117275. - CVE-2018-19364: Fixed a use-after-free if...

CVE-2018-19406

kvmpvsendipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service NULL pointer dereference and BUG via crafted system calls that reach a situation where the apic map is uninitialized...

Linux kernel denial of service vulnerability (CNVD-2018-26909)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in kvmpvsendipi in arch/x86/kvm/lapic.c in the Linux kernel. A local user ca...

Fedora 26 : xen (2018-0746dac335)

update Xen page-table isolation XPTI mitigation and add Branch Target Injection BTI mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing XSA-252 1549568 grant table v2 - v1 transition may crash Xen XSA-255 1549570 x86 PVH guest without LAPIC may DoS the host XSA-256 1549572 Note...

Fedora 27 : xen (2018-c553a586c8)

add Xen page-table isolation XPTI mitigation and Branch Target Injection BTI mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing XSA-252 1549568 grant table v2 - v1 transition may crash Xen XSA-255 1549570 x86 PVH guest without LAPIC may DoS the host XSA-256 1549572 Note that...

RHEL 6 : rhev-hypervisor6 (RHSA-2013:1802)

An updated rhev-hypervisor6 package that fixes one security issue and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores...

Scientific Linux Security Update : kvm on SL5.x x86_64 (20140212)

A divide-by-zero flaw was found in the apicgettmcct function in KVM's Local Advanced Programmable Interrupt Controller LAPIC implementation. A privileged guest user could use this flaw to crash the host. CVE-2013-6367 A memory corruption flaw was discovered in the way KVM handled virtual APIC...

Important: Red Hat Security Advisory: kvm security update

Updated kvm packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...