7 matches found
CVE-2022-22063
CVE-2022-22063 CVE-2022-22063 是某些较旧的高通芯片组中 hypervisor 固件的一个安全问题。未受保护的硬件组件（"启动重映射器"）可被滥用，从修改后的操作系统获得对 hypervisor 的完全读/写访问权限（权限提升）。在受影响的平台上利用该问题非常简单，因为不需要知道特定固件版本（例如地址或变量）的知识。 注意： 尽管高通已向客户提供了修复（有足够时间发布更新），但许多受影响的设备已经相当老旧，可能无法收到供应商的修复。该问题只能从修改过或已受损的操作系统（利用另一个安全问题）中利用。即使固件存在漏洞，保持操作系统更新和安全也可能足够。 概述 CV...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46689)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46689 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as...
SUSE CVE-2024-46689
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...
CVE-2024-46689
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...
CVE-2024-46689 soc: qcom: cmd-db: Map shared memory as WC, not WB
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...
CVE-2024-46689 soc: qcom: cmd-db: Map shared memory as WC, not WB
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...
Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-26920)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An integer overflow vulnerability exists in the hypervisor of the Qualcomm closed-sourc...