14 matches found
CVE-2026-72143 platform/x86: ISST: Restore SST-PP control to all domains
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains. Use pdinfo-sstbase...
CVE-2020-25600
A flaw was found in Xen. Misbehavior during domain initialization, where 32-bit domains including Domain 0 servicing other domains, may observe event channel allocations to succeed when they should fail. Subsequent use of such event channels leads to the corruption of other parts of the shared...
Use after free in QEMU/Xen block unplug protocol
ISSUE DESCRIPTION When unplugging an emulated block device the device was not fully unplugged, meaning a second unplug attempt would attempt to unplug the device a second time using a previously freed pointer. IMPACT An HVM guest which has access to an emulated IDE disk device may be able to...
openSUSE Security Update : xen (openSUSE-SU-2013:1404-1)
XEN was updated to 4.2.2, fixing lots of bugs and several security issues. Various upstream patches were also merged into this version by our developers. Detailed buglist : - bnc824676 - Failed to setup devices for vm instance when start multiple vms simultaneously - bnc817799 - sles9sp4 guest...
Fedora 20 : xen-4.3.0-7.fc20 (2013-18300)
Three security fixes CVE-2013-4355 CVE-2013-4356 CVE-2013-4361, Set 'Domain-0' label in xenstored.service systemd file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...
Fedora 18 : xen-4.2.3-3.fc18 (2013-18373)
Two security fixes CVE-2013-4355 CVE-2013-4361, Set 'Domain-0' label in xenstored.service systemd file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
CVE-2012-3433
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service domain 0 VCPU hang and kernel panic by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown...
PT-2012-5473
Name of the Vulnerable Software and Affected Versions Xen versions 4.2 and earlier Description The issue allows local guest administrators to cause a denial of service by consuming domain 0 memory via a crafted kernel or ramdisk, due to the lack of validation of the size of the kernel or ramdisk...
PT-2012-4707
Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.1 Description The issue allows local HVM guest OS kernels to cause a denial of service, resulting in a domain 0 VCPU hang and kernel panic. This occurs when the physical address space is modified in a way that trigge...
CVE-2007-4993
pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...
Design/Logic Flaw
pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...
CVE-2007-4993
pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...
RHEL 5 : kernel (RHSA-2007:0099)
Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...