Unbreakable Enterprise kernel security update

5.15.0-300.163.18 - crypto: qat - specify firmware files for 402xx Giovanni Cabiddu Orabug: 37044631 5.15.0-300.163.17 - KVM/x86: Do not clear SIPI while in SMM Boris Ostrovsky Orabug: 36955051 - Revert 'Fix userfaultfdapi to return EINVAL as expected' Vijayendra Suman Orabug: 36992217...

FreeBSD : FreeBSD -- bhyve privileged guest escape via fwctl (ab437561-47c0-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ab437561-47c0-11ee-8e38-002590c1f29c advisory. - The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86...

CVE-2023-3494

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer overflowing when copyin...

CVE-2023-3494

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer overflowing when copyin...

Buffer overflow

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer overflowing when copyin...

CVE-2023-3494 bhyve privileged guest escape via fwctl

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer overflowing when copyin...

CVE-2023-3494 bhyve privileged guest escape via fwctl

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer overflowing when copyin...

CVE-2023-3494

The CVE-2023-3494 issue affects the FreeBSD bhyve fwctl interface. A bug in the fwctl state machine can cause a buffer overflow when a guest copies a string into a host resident buffer, enabling malicious, privileged guest software to achieve code execution on the host bhyve process (typically ru...

FreeBSD -- bhyve privileged guest escape via fwctl

Problem Description: The fwctl driver implements a state machine which is executed when the guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer...

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD versions 13.1 and 13.2, which stems from a buffer overflow vulnerability in the fwctl driver state machine. The vulnerability can be exploited to execute arbitrary code as root ...