CVE-2021-47429

CVE-2021-47429 – Linux kernel (powerpc/64s): The issue occurs when an unrecoverable MCE is handled in NMI context, where the true NMI handling path could lead to calling an async MCE handler and corrupt IRQ state. The fix introduces separate _async and NMI-specific machine_check_exception handler...

CVE-2021-47369 s390/qeth: fix NULL deref in qeth_clear_working_pool_list()

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qethclearworkingpoollist When qethsetonline calls qethclearworkingpoollist to roll back after an error exit from qethhardsetupcard, we are at risk of accessing card-qdio.inq before it was allocated by...

SUSE CVE-2024-35804

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Mark target gfn of emulated atomic instruction as dirty When emulating an atomic access on behalf of the guest, mark the target gfn dirty if the CMPXCHG by KVM is attempted and doesn't fault. This fixes a bug where KVM...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a failure in the KVM:x86 module to handle SRCU initialization during page track initialization...

ROS-20240521-11

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...

CVE-2024-35981

In the Linux kernel, the following vulnerability has been resolved: virtionet: Do not send RSS key if it is not supported There is a bug when setting the RSS options in virtionet that can break the whole machine, getting the kernel into an infinite loop. Running the following command in any QEMU...

DEBIAN-CVE-2024-35981

In the Linux kernel, the following vulnerability has been resolved: virtionet: Do not send RSS key if it is not supported There is a bug when setting the RSS options in virtionet that can break the whole machine, getting the kernel into an infinite loop. Running the following command in any QEMU...

UBUNTU-CVE-2024-35980

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Fix TLBI RANGE operand KVM/arm64 relies on TLBI RANGE feature to flush TLBs when the dirty pages are collected by VMM and the page table entries become write protected during live migration. Unfortunately, the operand...

CVE-2024-35981 virtio_net: Do not send RSS key if it is not supported

In the Linux kernel, the following vulnerability has been resolved: virtionet: Do not send RSS key if it is not supported There is a bug when setting the RSS options in virtionet that can break the whole machine, getting the kernel into an infinite loop. Running the following command in any QEMU...

Unable to create New Machine Catalogs or New virtual machines in existing Machine Catalogs

Issue : Unable to create New Machine Catalogs or New virtual machines in existing Machine Catalogs. Error : Failed to create virtual machine 'VM', account name was not found. Description: Unable to add new machines in existing machine catalogs. Unable to create new machine catalogs. Unable to...

CVE-2024-35814

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb "swiotlb: fix a braino in the alignment check fix", which was a fix for commit 0eee5ae10256 "swiotlb: fix slot alignment checks", causes...

UBUNTU-CVE-2024-35804

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Mark target gfn of emulated atomic instruction as dirty When emulating an atomic access on behalf of the guest, mark the target gfn dirty if the CMPXCHG by KVM is attempted and doesn't fault. This fixes a bug where KVM...

CVE-2024-35814

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb "swiotlb: fix a braino in the alignment check fix", which was a fix for commit 0eee5ae10256 "swiotlb: fix slot alignment checks", causes...

CVE-2024-35814 swiotlb: Fix double-allocation of slots due to broken alignment handling

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb "swiotlb: fix a braino in the alignment check fix", which was a fix for commit 0eee5ae10256 "swiotlb: fix slot alignment checks", causes...

UBUNTU-CVE-2023-46842

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a...

PVS export wizard reports "No Devices Found to Export"

Unable to add PVS provisioned machines to Studio Machine Catalogs. When using the Export Devices Wizard, users receive the error "No Devices Found to Export". Issue remains even after deleting and recreating the AD computer objects...

Number withdrawal

wandb is a tool for visualizing and tracking machine learning experiments. This CVE number has been withdrawn...

kernel: untrusted VMM can trigger int80 syscall handling

A flaw was found in the Linux kernel. A VMM can inject external interrupts on any arbitrary vector at any time, which may allow the guest OS to be manipulated from the VMM side...

CVE-2024-22270

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing HGFS functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual...

CVE-2024-22269

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine...