PT-2023-33312 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: A potential security issue exists due to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2023-33400 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.6 through 4.19.268 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-33376 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 5.4.225 Description: The issue is related to a pci device refcount leak in the nv1a ram new function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v5.4.226. The actual...

PT-2023-33156 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a pci device refcount leak in the nv1a ram new function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v6.0.12. The actual impact...

PT-2023-33143 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33444 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue is related to a pci device refcount leak in the nv1a ram new function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v4.14.301. The actual...

PT-2023-33213 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33413 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-34542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential security issue exists due to a pci device refcount leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33370 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.15 through 5.4.225 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33313 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.15 through 5.10.157 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2024-11865 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference count leak in the Linux kernel has been identified and resolved. The issue is related to the dmar dev scope init function in the iommu/vt-d component. The for each pci dev...

PT-2022-36284 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to a possible memory leak caused by a missing pci dev put call. This problem was introduced in version v4.4 and is fixed in Linux Kernel version v5.10.156. The actual...

USN-5728-3: Linux kernel (GCP) vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

kernel: sfc: fix use after free when disabling sriov

In the Linux kernel, the following vulnerability has been resolved: sfc: fix use after free when disabling sriov Use after free is detected by kfence when disabling sriov. What was read after being freed was vf-pcidev: it was freed from pcidisablesriov and later read in efxef10sriovfreevfvports,...

SUSE-SU-2022:2880-1 Security update for dpdk

This update of dpdk fixes the following issue: - Fix to read PCI device name as UTF strings bsc1198873 - Allow configuring thread granularity of Kernel NIC Interface bsc1195172 - Rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

Xen PV Guest Non-SELFSNOOP CPU Memory Corruption Exploit

On CPUs without SELFSNOOP support, a Xen PV domain that has access to a PCI device which grants the domain the ability to set arbitrary cache attributes on all its pages can trick Xen into validating an L2 pagetable that contains a cacheline that is marked as clean in the cache but actually diffe...

Xen PV Guest Non-SELFSNOOP CPU Memory Corruption

Xen: PV guest on non-SELFSNOOP CPUs can validate non-coherent L2 pagetable I'm not sure whether there are any major users of unshimmed Xen PV left, but https://xenbits.xen.org/docs/unstable/support-matrix.html says it's still a security-supported usecase for 64-bit guests. Tested on Debian's Xen...

SUSE-SU-2022:1892-1 Security update for dpdk

This update for dpdk fixes the following issues: Security: - CVE-2021-3839: Fixed a memory corruption issue during vhost-user communication bsc1198963. - CVE-2022-0669: Fixed a denial of service that could be triggered by a vhost-user master bsc1198964. Bugfixes: - kni: allow configuring thread...

OPENSUSE-SU-2021:3968-1 Security update for xen

This update for xen fixes the following issues: - CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly XSA-386 bsc1191363. - CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs XSA-388 bsc1192557. - CVE-2021-28705, CVE-2021-28709: Fixed issues...