Updated virtualbox & kmod-virtualbox packages fix security vulnerabilities

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

SUSE CVE-2023-52883

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible null pointer dereference abo-tbo.resource may be NULL in amdgpuvmboupdate...

KLA70468 DoS vulnerabilities in Oracle VirtualBox

An unspecified vulnerabilities were found in Oracle VirtualBox. None of these vulnerabilities may be remotely exploitable without authentication, i.e., none may be exploited over a network without requiring user credentials. Original advisories Oracle Critical Patch Update Advisory – July 2024...

cockpit-machines bug fix update

An update is available for cockpit-machines. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit component for managing virtual machines. If "virt-install" i...

open-vm-tools bug fix and enhancement update

An update is available for open-vm-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

CVE-2024-0094

NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0094

CVE-2024-0094 concerns NVIDIA vGPU software for Linux, specifically a vulnerability in the Virtual GPU Manager that allows an untrusted guest VM to cause improper control of the interaction frequency on the host, potentially leading to denial of service. The CVE is documented with a CVSS 3.1 base...

CVE-2024-5661 Potential Denial of Service affecting XenServer and Citrix Hypervisor

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive...

CVE-2024-5661 Potential Denial of Service affecting XenServer and Citrix Hypervisor

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive...

CVE-2024-5661

CVE-2024-5661 affects XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR. The root cause is an improper rate limiting issue in an endpoint, which a malicious administrator of a guest VM can exploit to cause the host to become slow and/or unresponsive (Denial of Service). Impact is a local, privilege-...

CVE-2024-0094: Improper Control of Interaction Frequency

NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-5661: Undefined Security Weakness

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive...

PT-2024-7650

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape, potentially allowing an attacker to escalate...

CVE-2024-37325

Azure Science Virtual Machine DSVM Elevation of Privilege Vulnerability...

CVE-2024-37325 Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

...

CVE-2024-37325

CVE-2024-37325 affects Microsoft Azure Data Science Virtual Machines (DSVM) running Linux/Ubuntu and is an Elevation of Privilege vulnerability. The DSVMs with versions older than 24.05.24 are vulnerable; an unauthenticated attacker can obtain user credentials and log in with elevated privileges,...

XenServer and Citrix Hypervisor Security Update for CVE-2024-5661

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which mayallow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. This issue has the following identifier: CVE-2024-5661 CVE-2024-5661 affects all deployments. Summary CV...

SUSE CVE-2020-10773

A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout file. This flaw allows a local user to see the kernel data...

CVE-2024-36911

In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers need to...

CVE-2024-36944

In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxlfencewait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got o...