PT-2021-28571

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns a fix for TX queue lookup in TX flush done handling. It was introduced in version v5.10 and fixed in Linux Kernel version v5.11.20. The actual impact and attack plausibilit...

PT-2024-11096 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the powerpc/64s architecture in the Linux kernel, where crashes can occur when toggling the entry flush barrier. The entry flush mitigation can be enabled or...

PT-2024-11094

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock that occurs when cloning inline extents and using qgroups in the btrfs file system. This happens because when reserving metadata space for a transactio...

PT-2024-11067 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the TX queue lookup in TX flush done handling in the Linux kernel. Specifically, the problem arises because the code starts from a TXQ instance number 'qid', no...

Xen Missed Flush DoS or Privilege Escalation (XSA-366)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an issue allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service host OS crash or gain privileges. This occurs because a...

DEBIAN-CVE-2021-30015

There is a Null Pointer Dereference in function filtercore/filterpck.c:gffilterpcknewallocinternal in GPAC 1.0.1. The pid comes from function av1dmxparseflushsample, the ctx.opid maybe NULL. The result is a crash in gffilterpcknewallocinternal...

PT-2024-11079 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A recent change in the Linux kernel created a dedicated workqueue for state-change work with WQ HIGHPRI and WQ MEM RECLAIM flags. However, the state-change work mhi pm st worker does n...

DEBIAN-CVE-2021-27379

An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service host OS crash or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct...

UBUNTU-CVE-2021-27379

An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service host OS crash or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct...

PT-2021-27650

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions, including tb flush armeb, cpu arm exec armeb, and tcg...

PT-2021-21416

Name of the Vulnerable Software and Affected Versions QPDF versions 9.x through 9.1.1 QPDF versions 10.x through 10.0.4 Description The issue is a heap-based buffer overflow in Pl ASCII85Decoder::write, which is called from Pl AES PDF::flush and Pl AES PDF::finish, occurring when a certain...

SUSE-SU-2020:3742-1 Security update for xen

This update for xen fixes the following issues: - bsc1178963 - stack corruption from XSA-346 change XSA-355 - bsc1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 - bsc1177412 - CVE-2020-27672: Race condition in Xen mapping code XSA-345 - bsc1177413 -...

PT-2020-22177

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write error. The crash state indicates involvement of the Pl ASCII85Decoder::write, Pl AES PDF::flush, and P...

PT-2020-22125

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 8 crash. The crash state involves the tdefl compress lz codes, tdefl compress block, and tdefl flush...

PT-2020-22126

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash issue was reported, with a crash type of UNKNOWN READ. The crash state includes functions such as wpabuf free, p2p device free, and p2p flush. No...

UBUNTU-CVE-2020-27671

An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service data corruption, cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled...

undue deferral of IOMMU TLB flushes

ISSUE DESCRIPTION To efficiently change the physical to machine address mappings of a larger range of addresses for fully virtualized guests, Xen contains an optimization to coalesce per-page IOMMU TLB flushes into a single, wider flush after all adjustments have been made. While this is fine to ...

Mozilla: Use-after-free in nsGlobalWindowInner

The Mozilla Foundation Security Advisory describes this flaw as: When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash...

Mozilla: Use-after-free in nsGlobalWindowInner

The Mozilla Foundation Security Advisory describes this flaw as: When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash...

kernel: kvm: Information leak within a KVM guest

A flaw was found in the way Linux kernel's KVM hypervisor handled deferred TLB flush requests from guest. A race condition may occur between the guest issuing a deferred TLB flush request to KVM, and then KVM handling and acknowledging it. This may result in invalid address translations from TLB...