EUVD-2020-20808

Malware in sbrugna...

Design/Logic Flaw

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36145

The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rbentry...

CVE-2021-36146

ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...

CVE-2021-36144: Use After Free

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36145: Use After Free

The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rbentry...

CVE-2021-36146: NULL Pointer Dereference

ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...

PT-2021-21137

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: An issue in the devicemodel/hw/pci/virtio/virtio net.c file allows a NULL pointer dereference for vq-used in the virtio net ping rxq function. Recommendations: For versions prior to 2.5, update to versi...

PT-2021-21135

Name of the Vulnerable Software and Affected Versions: ACRN versions through 2.5 Description: The issue is related to a use-after-free condition in the devicemodel/core/mem.c file for a freed rb entry. Recommendations: For ACRN versions through 2.5, at the moment, there is no information about a...

PT-2021-21136

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: The issue is related to a NULL Pointer Dereference for a trb pointer in the devicemodel/hw/pci/xhci.c file. This indicates a problem where the software attempts to access or manipulate a null non-existe...

PT-2021-21134

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: The issue is related to a use-after-free condition in the polling timer handler for a freed virtio device, specifically in the devicemodel/hw/pci/virtio/.c files. Recommendations: For versions prior to...

Null pointer dereference

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

CVE-2020-28346: NULL Pointer Dereference

ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...

PT-2021-11505

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.2 Description: The issue is related to a NULL Pointer Dereference in the devicemodel/hw/pci/virtio/virtio.c file. Recommendations: For versions prior to 2.2, at the moment, there is no information about a newer versio...

CVE-2019-18844

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pcicore.h instead of other mechanisms for propagating error information or diagnostic information, which might allow attackers to cause a denial of service assertion failu...

PT-2019-15696

Name of the Vulnerable Software and Affected Versions ACRN versions prior to 1.2 ACRN versions prior to 2019w25.5-140000p Description The issue is related to the Device Model in ACRN, where assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci core.h are used instead of other...

cxenstored: Race in domain cleanup

ISSUE DESCRIPTION When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. IMPACT The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain creation / destruction, ballooning, device changes, etc. VULNERABLE SYSTEM...