Lucene search
+L

871 matches found

Ubuntu
Ubuntu
added 2022/01/06 3:56 a.m.141 views

USN-5211-1: Linux kernel vulnerability

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages...

4.4CVSS6.6AI score0.00515EPSS
SaveExploits1
OSV
OSV
added 2022/01/05 5:31 p.m.6 views

USN-5206-1 linux-oem-5.14 vulnerability

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages...

4.4CVSS6.7AI score0.00515EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2022/01/05 5:31 p.m.126 views

USN-5206-1: Linux kernel (OEM) vulnerability

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages...

4.4CVSS6.6AI score0.00515EPSS
SaveExploits1
NVD
NVD
added 2022/01/03 8:15 a.m.26 views

CVE-2021-30269

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired...

7.8CVSS0.00151EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/03 8:15 a.m.17 views

Null pointer dereference

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired...

7.2CVSS7.7AI score0.00151EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/03 7:25 a.m.41 views

CVE-2021-30269

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired...

7.3CVSS7.9AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.15 views

PT-2025-8100

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to non-access data TLB cache flush faults on parisc architecture. When a page is not present, non-access data TLB faults occur from...

7.1CVSS5.8AI score0.00269EPSS
SaveExploits0References20
Lenovo
Lenovo
added 2021/12/14 5:0 p.m.12 views

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV) - Lenovo Support US

No description provided...

8.4CVSS7.3AI score0.00239EPSS
SaveExploits0
NVD
NVD
added 2021/12/10 10:15 p.m.22 views

CVE-2021-26340

A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer TLB resulting in unexpected behavior inside the virtual machine VM...

8.4CVSS0.00239EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/10 10:15 p.m.25 views

Code injection

A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer TLB resulting in unexpected behavior inside the virtual machine VM...

3.6CVSS8.2AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/10 9:55 p.m.33 views

CVE-2021-26340

A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer TLB resulting in unexpected behavior inside the virtual machine VM...

8.5AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/10 9:55 p.m.87 views

CVE-2021-26340

CVE-2021-26340 is a published vulnerability affecting AMD SEV/SEV-ES environments. A malicious hypervisor with an unprivileged attacker process inside a guest VM may fail to flush the TLB, causing unexpected VM behavior and potential loss of integrity and confidentiality. Affected products includ...

8.4CVSS8.2AI score0.00239EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/11/16 6:15 p.m.32 views

CVE-2021-26312

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

5.5CVSS0.00239EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/16 6:15 p.m.28 views

Design/Logic Flaw

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

2.1CVSS5.9AI score0.00239EPSS
SaveExploits0References2Affected Software57
CVE
CVE
added 2021/11/16 5:55 p.m.95 views

CVE-2021-26312

CVE-2021-26312 is addressed in SUSE kernel-firmware updates. The advisory notes that failure to flush the IOMMU TLB may allow an IO device to access memory it should not, potentially compromising integrity. SUSE’s fixes update kernel-firmware to versions 20220411 (AMD microcode updates) and 20220...

5.5CVSS5.8AI score0.00239EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/16 5:55 p.m.41 views

CVE-2021-26312

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

6.3AI score0.00239EPSS
SaveExploits0References2
Amd
Amd
added 2021/06/12 12:0 a.m.49 views

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV)

Bulletin ID: AMD-SB-1023 Potential Impact: Loss of Integrity, Confidentiality and Availability Summary A malicious hypervisor HV along with an unprivileged process controlled by an attacker and executing in a guest VM, may maliciously control the process of flushing the Translation Lookaside Buff...

8.4CVSS8.2AI score0.00239EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/06/10 12:0 a.m.42 views

SUSE SLES11 Security Update : xen (SUSE-SU-2020:14557-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14557-1 advisory. - A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing...

7.8CVSS6.4AI score0.00398EPSS
SaveExploits0References20
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2020:14557-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.00398EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2019:13921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.06169EPSS
SaveExploits2References18
Rows per page
Query Builder