Xen Insufficient Cache Write-Back (XSA-321)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service and potential privilege escalation due to an insufficient cache write-back under VT-d. A malicious guest may be able to retain read/write DMA access to frames returned...

CVE-2020-15565

An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both...

Design/Logic Flaw

An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both...

CVE-2020-15565

An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both...

CVE-2020-15565

Root cause: CVE-2020-15565 arises from insufficient cache write-back under VT-d when page tables are shared between IOMMU and CPU, requiring flushing of both CPU and IOMMU TLBs. A backport/backing fixes missed a necessary cache flush, leaving IOMMU updates potentially non-coherent. Affected produ...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:1085-1 Rating: important References: 1012382 1020413 1065600 1070767 1075697 1082943 1087092 1090435 1102959 1103429 1106929 1109137 1109248 1119019 1119843 1120691 1120902 1121713 1121805 1124235...

OracleVM 3.3 : kernel-uek (OVMSA-2016-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - skbuff: skbsegment: orphan frags before copying Dongli Zhang - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE Venkat Venkatsubra Orabug: 22888920 - mlx4core: Introduce...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.6.1 - skbuff: skbsegment: orphan frags before copying Dongli Zhang Orabug: 23018911 - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE Venkat Venkatsubra Orabug: 22888920 - mlx4core: Introduce restrictions for PD update Ajaykumar Hotchandani - filenam...

SUSE: Security Advisory for xen (SUSE-SU-2015:0022-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for Xen (SUSE-SU-2015:0613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for xen (important)

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 boo931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

SUSE SLES11 Security Update : xen (SUSE-SU-2014:1732-1)

xen was updated to fix 10 security issues : - Guest effectable page reference leak in MMUMACHPHYSUPDATE handling CVE-2014-9030. - Insufficient bounding of 'REP MOVS' to MMIO emulated inside the hypervisor CVE-2014-8867. - Missing privilege level checks in x86 emulation of far branches...

kernel security and bug fix update

3.10.0-229.4.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-229.4.2 - x86 crypto: aesni - fix memory usage in GCM decryption Kurt Stutsman 1213331 1212178 CVE-2015-3331 3.10.0-229.4.1 - crypto x86: sha256ssse3 - also test for BMI2 Herbert Xu 1211484 1201563 - crypto testmgr: fix RNG return...

Security update for xen (important)

Xen was updated to 4.3.4 to fix multiple vulnerabities and non-security bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible XSA-125 CVE-2015-2752 bnc922705 - Unmediated PCI command register access in qemu XSA-126 CVE-2015-2756 bnc922706 -...

OracleVM 3.2 : xen (OVMSA-2013-0036)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: don't permit SVTNOVERIFY entries for known device types Only in cases where we don't know what to do we should leave the IRTE blank suppressing all validation, but we should always log a warning...

OracleVM 3.2 : xen (OVMSA-2013-0004)

The remote OracleVM system is missing necessary patches to address critical security updates : - Xen Security Advisory CVE-2012-5634 / XSA-33 v3 VT-d interrupt remapping source validation flaw The patch supplied for Xen 4.1 xsa33-4.1.patch contained a build error. A corrected patch is attached. T...

OracleVM 3.0 : xen (OVMSA-2013-0002)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: fix interrupt remapping source validation for devices behind legacy bridges Using SVTVERIFYBUS here doesn't make sense native Linux also uses SVTVERIFYSIDSQ here instead. CVE-2012-5634...

OracleVM 3.1 : xen (OVMSA-2013-0001)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: fix interrupt remapping source validation for devices behind legacy bridges Using SVTVERIFYBUS here doesn't make sense native Linux also uses SVTVERIFYSIDSQ here instead. CVE-2012-5634 - When xe...

openSUSE Security Update : xen (openSUSE-SU-2013:0636-1)

XEN was updated to fix various bugs and security issues : Security issues fixed : - bnc800275 - CVE-2013-0153: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs - bnc797523 - CVE-2012-6075: qemu / kvm-qemu: e1000 overflows under some conditions - bnc797031 - Xen Security...

openSUSE Security Update : xen (openSUSE-SU-2013:1876-1)

Xen was updated to 4.3.1 and also to fix various security issues and bugs : - bnc851749 - Xen service file does not call xend properly xend.service - Add missing requires to pciutils package for xend-tools - bnc851386 - xen: XSA-78: Insufficient TLB flushing in VT-d iommu code - Make -devel packa...