Code injection

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for...

CVE-2021-26324

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs...

Denial of service

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs...

CVE-2021-26324

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs...

CVE-2021-26324

CVE-2021-26324 concerns a bug in the SEV-ES TMR that may lead to a loss of memory integrity for SNP-active VMs on AMD EPYC platforms. The available documents do not provide an attacker’s exploit path or exploitability details. The AMD security bulletin AMD-SB-1021 maps this CVE to affected EPYC g...

PT-2022-9725

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description A bug related to the SEV-ES TMR may cause a potential loss of memory integrity for SNP-active VMs. Recommendations At the moment, there is no information about a newer version that...

CVE-2021-26324: Undefined Security Weakness

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs...

Fedora: Security Advisory for swtpm (FEDORA-2022-087b1b4d2d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: swtpm-0.7.1-1.20220218git92a7035.fc35

TPM emulator built on libtpms providing TPM functionality for QEMU VMs...

[SECURITY] Fedora 34 Update: swtpm-0.6.2-1.20220218git23b78c0.fc34

TPM emulator built on libtpms providing TPM functionality for QEMU VMs...

CVE-2021-3631

CVE-2021-3631 affects libvirt: flaw in SELinux MCS category pair generation for VM dynamic labels allows a guest to access files labeled for another guest, breaking sVirt confinement and impacting confidentiality/integrity. Connected advisories confirm libvirt remediation via package upgrades (no...

PT-2022-36846

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: evax bfd print dst, evax bfd print image, and vms bfd...

AlmaLinux 8 : kernel (ALSA-2021:2168)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:2168 advisory. - A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be...

PT-2022-3346 · Coreos +5 · Ignition +5

Name of the Vulnerable Software and Affected Versions: Ignition versions prior to 2.14.0 Description: A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where...

binutils:fuzz_objdump: Heap-buffer-overflow in evax_bfd_print_dst

Detailed Report: https://oss-fuzz.com/testcase?key=6551914504912896 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b5 Crash State: evaxbfdprintdst evaxbfdprintimage...

Code injection

IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019...

CVE-2021-38918: Undefined Security Weakness

IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019...

the PVS Target VMs cannot boot due to the following error message: --- Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys

The PVS Target VMs cannot boot due to the following error message: Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys...

Enterprise Management Server OMI Privilege Escalation

The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure OMI extensions for managing virtual machines in Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5269762532311040 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60500003c951 Crash State: bfdgetl16 parsemodule...