12929 matches found
Incorrect removal of permissions on PCI device unplug
ISSUE DESCRIPTION When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the...
SUSE CVE-2022-50575
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmdioctlmmapresource As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than= MAXORDER, then kcalloc will fail, it creates a stack trace and messes up dmesg...
EUVD-2022-55659
In the Linux kernel, the following vulnerability has been resolved: xfrm: Update ipcompscratches with NULL when freed Currently if ipcompallocscratches fails to allocate memory ipcompscratches holds obsolete address. So when we try to free the percpu scratches using ipcompfreescratches it tries t...
CVE-2022-50575
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmdioctlmmapresource As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than= MAXORDER, then kcalloc will fail, it creates a stack trace and messes up dmesg...
UBUNTU-CVE-2022-50575
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmdioctlmmapresource As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than= MAXORDER, then kcalloc will fail, it creates a stack trace and messes up dmesg...
CVE-2022-50575 xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmdioctlmmapresource As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than= MAXORDER, then kcalloc will fail, it creates a stack trace and messes up dmesg...
CVE-2022-50575 xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmdioctlmmapresource As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than= MAXORDER, then kcalloc will fail, it creates a stack trace and messes up dmesg...
SUSE CVE-2025-58147
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...
SUSE CVE-2025-58148
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...
x86: Incorrect input sanitisation in Viridian hypercalls
ISSUE DESCRIPTION Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause out-of-bounds reads and writes while processing the inputs. CVE-2025-58147. Hypercalls using the HVVPSET Sparse...
The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems, related to deficiencies in access control, allows attackers to gain access to confidential information.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to confidential information remotely...
The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to synchronization errors when using shared resources, allows a perpetrator to compromise the vulnerable system.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the vulnerable system...
Linux Distros Unpatched Vulnerability : CVE-2022-50471
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/gntdev: Accommodate VMA splitting Prior to this commit, the gntdev driver code did not handle the following scenario correctly with paravirtualized PV Xen...
The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
SUSE CVE-2022-50471
In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Accommodate VMA splitting Prior to this commit, the gntdev driver code did not handle the following scenario correctly with paravirtualized PV Xen domains: User process sets up a gntdev mapping composed of two grant...
EUVD-2012-6188
Malware in sbrugna...