CBL Mariner 2.0 Security Update: qemu (CVE-2023-6693)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6693 advisory. - A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in...

CBL Mariner 2.0 Security Update: qemu (CVE-2023-6683)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6683 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The...

PT-2025-13302 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the handling of PTE markers in the hugetlb change protection function. The issue can be triggered by mapping a memfd...

CVE-2023-5088 affecting package qemu for versions less than 6.2.0-21

CVE-2023-5088 affecting package qemu for versions less than 6.2.0-21. A patched version of the package is available...

CVE-2023-6683 affecting package qemu for versions less than 6.2.0-21

CVE-2023-6683 affecting package qemu for versions less than 6.2.0-21. A patched version of the package is available...

CVE-2023-6693 affecting package qemu for versions less than 6.2.0-21

CVE-2023-6693 affecting package qemu for versions less than 6.2.0-21. A patched version of the package is available...

Qemu: improper ide controller reset can lead to mbr overwrite

...

Qemu: vnc: null pointer dereference in qemu_clipboard_request()

...

Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()

...

RHEL 7 : qemu-kvm-rhev (RHSA-2018:1113)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1113 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

RHBA-2018:0831 Red Hat Bug Fix Advisory: new packages: qemu-kvm-ma

Bulletin has no description...

mingw-qemu-ga-win bug fix and enhancement update

An update is available for mingw-qemu-ga-win. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

RLSA-2024:9136 Moderate: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow...

qemu-kvm security update

An update is available for qemu-kvm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linux...

edk2:20240524 security update

An update is available for edk2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...

Linux 6.4 mbind() Use-After-Free / Race Condition

There is a race between mbind and VMA-locked page faults that leads to a use-after-free condition. tested on git master, at commit 57012c57536f Summary: There's a race between mbind and VMA-locked page faults, leading to UAF. You can quickly hit this with a straightforward reproducer that just...

Security update for build

This update for build fixes the following issues: - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git repositories bnc1230469 Other fixes: - Fixed behaviour when using "--shell" aka "osc shell" option in a VM build. Startup is faster and permissions stay intact now. fixes for...

Linux Distros Unpatched Vulnerability : CVE-2020-35503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in...

Linux Distros Unpatched Vulnerability : CVE-2024-7409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service DoS attack via improper synchronization during socket closure when a clie...

Linux Distros Unpatched Vulnerability : CVE-2019-12928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution,...