Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: A missing check was fixed to avoid NULL dereferencing. cacheent could potentially be set to NULL inside virtiogpucmdgetcapset, which could lead to a NULL dereferencing due to its recent use i.e., ptr =...

SUSE CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

SUSE CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

PT-2021-5462

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description The issue is related to an out-of-bounds write vulnerability in the virtio vhost-user GPU device of QEMU. This vulnerability occurs while processing the VIRTIO GPU CMD GET CAPSET command from t...

PT-2021-5459

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description An information disclosure issue exists in the virtio vhost-user GPU device of QEMU, specifically in the virgl cmd get capset info function in contrib/vhost-user-gpu/virgl.c. This issue could...

PT-2016-3008

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to an information leakage problem in QEMU when built with Virtio GPU Device emulator support. It occurs while processing the 'VIRTIO GPU CMD GET CAPSET INFO' command, allowi...

PT-2016-3005

Name of the Vulnerable Software and Affected Versions Qemu affected versions not specified Description The issue is related to an information leakage problem in Qemu when built with Virtio GPU Device emulator support. It occurs while processing the 'VIRTIO GPU CMD GET CAPSET' command, allowing a...

UBUNTU-CVE-2016-9908

Quick Emulator Qemu built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

PT-2016-3344

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the virgl cmd get capset function in the Virtio GPU Device emulator support component of QEMU. It allows local guest OS users to cause a denial of service out-of-bounds...