EUVD-2020-20808

Malware in sbrugna...

Design/Logic Flaw

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

PT-2021-21135

Name of the Vulnerable Software and Affected Versions: ACRN versions through 2.5 Description: The issue is related to a use-after-free condition in the devicemodel/core/mem.c file for a freed rb entry. Recommendations: For ACRN versions through 2.5, at the moment, there is no information about a...

CVE-2021-36145: Use After Free

The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rbentry...

CVE-2021-36146: NULL Pointer Dereference

ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...

CVE-2021-36144: Use After Free

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

Null pointer dereference

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346: NULL Pointer Dereference

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

cxenstored: Race in domain cleanup

ISSUE DESCRIPTION When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. IMPACT The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain creation / destruction, ballooning, device changes, etc. VULNERABLE SYSTEM...