CVE-2021-36146

CVE-2021-36146 affects ACRN before 2.5 via a NULL pointer dereference in devicemodel/hw/pci/xhci.c when handling a trb pointer. The issue is documented across multiple sources (e.g., NVD entry and CNVD/RH mirrors) confirming a null pointer dereference vulnerability in the xhci.c file of ACRN’s de...

CVE-2021-36147

The CVE-2021-36147 issue affects ACRN before 2.5, specifically a null pointer dereference in virtio_net_ping_rxq (devicemodel/hw/pci/virtio/virtio_net.c) on vq->used, leading to a crash/partial availability impact. Affected product: ACRN hypervisor; vulnerable component: virtio_net_ping_rxq in...

CVE-2021-36147

An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtionet.c virtionetpingrxq NULL pointer dereference for vq-used...

CVE-2021-36148

CVE-2021-36148 affects the ACRN hypervisor prior to version 2.5. The vulnerability is in dmar_free_irte (hypervisor/arch/x86/vtd.c) where an irte_alloc_bitmap buffer overflow is possible. CVSS details from the entry indicate a HIGH impact (CVSS 3.1: LOCAL access, UI required, base score 7.8) with...

CVE-2021-36148

An issue was discovered in ACRN before 2.5. dmarfreeirte in hypervisor/arch/x86/vtd.c allows an irteallocbitmap buffer overflow...

ACRN 代码问题漏洞

ACRN is an open source project released by the Linux Foundation, a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in virtionetpingrxq in devicemodel/hw/pci/virtio/virtionet.c in versions prior to ACRN 2.5. No details of the vulnerability are...

ACRN 代码问题漏洞

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in devicemodel/hw/pci/xhci.c in versions prior to ACRN 2.5. No details of the vulnerability are provided at this time...

ACRN 安全漏洞

ACRN is an open source project released by the Linux Foundation, a hypervisor designed for IoT and embedded devices. An irteallocbitmap buffer overflow vulnerability exists in dmarfreeirte in hypervisor/arch/x86/vtd.c in versions prior to ACRN 2.5. No detailed vulnerability details are provided a...

ACRN Null Pointer Dereference Vulnerability

ACRN is an open source virtual machine monitor for the Internet of Things. ACRN suffers from a security vulnerability that stems from devicemodel/hw/pci/virtio/virtio.c null pointer dereference. No details of the vulnerability are provided at this time...

CVE-2020-28346

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

Null pointer dereference

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346

CVE-2020-28346 : The vulnerability affects ACRN (hypervisor) up to version 2.2, where the devicemodel/hw/pci/virtio/virtio.c contains a NULL pointer dereference. This is the underlying cause, as described in multiple sources, and the impact is listed as HIGH (availability impact) with network att...

CVE-2020-15687

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

CVE-2020-15687

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

Improper access control

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

CVE-2020-15687

The affected software is the ACRN Project Hypervisor (versions 2.0 and 1.6.1). The vulnerability arises from missing access control restrictions in the Hypervisor component, enabling a malicious entity with root access in the Service VM userspace to abuse PCIe assign/de-assign Hypercalls via craf...

CVE-2020-15687

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

ACRN Denial of Service Vulnerability

ACRN is an open source virtual machine monitor for the Internet of Things. A security vulnerability exists in versions prior to ACRN 2019w25.5-140,000p. An attacker can exploit the vulnerability to cause a denial of service assertion failure...