Lucene search
K

18 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/28 9:36 a.m.8 views

CVE-2026-46171

In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc hostcontext.vector.datap fails in kvmriscvvcpuallocvectorcontext, the first allocation guestcontext.vector.datap is leaked. Free it before returning...

5.8AI score0.00126EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/05/28 9:36 a.m.30 views

CVE-2026-46171 riscv: kvm: fix vector context allocation leak

In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc hostcontext.vector.datap fails in kvmriscvvcpuallocvectorcontext, the first allocation guestcontext.vector.datap is leaked. Free it before returning...

0.00126EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.9 views

PT-2026-44294

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description A memory leak occurs in the Linux kernel within the RISC-V KVM implementation. Specifically, in the kvm riscv vcpu alloc...

9.8CVSS6AI score0.00539EPSS
Exploits3References288
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fixed the issue where the sevreceivestart command failed due to the absence of the sevdecommission command. The current SEV context must be decommissioned if binding an ASID fails after a RECEIVESTART operation. Accordi...

5.1CVSS5.3AI score0.00213EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-24698

Malicious code in bioql PyPI...

3.3CVSS4.9AI score0.00205EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/05/22 10:20 a.m.30 views

CVE-2021-47389

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix missing sevdecommission in sevreceivestart DECOMMISSION the current SEV context if binding an ASID fails after RECEIVESTART. Per AMD's SEV API, RECEIVESTART generates a new guest context and thus needs to be paired...

5.5CVSS6.9AI score0.00213EPSS
Exploits0References4
NVD
NVD
added 2024/05/21 3:15 p.m.20 views

CVE-2021-47389

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix missing sevdecommission in sevreceivestart DECOMMISSION the current SEV context if binding an ASID fails after RECEIVESTART. Per AMD's SEV API, RECEIVESTART generates a new guest context and thus needs to be paired...

5.1CVSS6.5AI score0.00213EPSS
Exploits0References2
OSV
OSV
added 2024/05/21 3:15 p.m.0 views

UBUNTU-CVE-2021-47389

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix missing sevdecommission in sevreceivestart DECOMMISSION the current SEV context if binding an ASID fails after RECEIVESTART. Per AMD's SEV API, RECEIVESTART generates a new guest context and thus needs to be paired...

5.1CVSS5.7AI score0.00213EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:0 a.m.3 views

The vulnerability of the SNP Guest Context Page Handler component in AMD microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SNP Guest Context Page Handler component in AMD microprocessors lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

3.3CVSS6.1AI score0.00205EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/11/16 1:55 a.m.2 views

SUSE CVE-2023-20519

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity...

6CVSS5AI score0.00205EPSS
Exploits0References9
OSV
OSV
added 2023/11/14 7:15 p.m.1 views

CVE-2023-20519

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity...

3.3CVSS6AI score0.00205EPSS
Exploits0References1
NVD
NVD
added 2023/11/14 7:15 p.m.23 views

CVE-2023-20519

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity...

3.3CVSS0.00205EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 6:53 p.m.16 views

CVE-2023-20519

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity...

6.7AI score0.00205EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.3 views

PT-2023-8273 · Amd +1 · Amd Snp Guest Context Page Handler +1

Name of the Vulnerable Software and Affected Versions: AMD SNP Guest Context Page Handler affected versions not specified Description: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent,...

9.8CVSS6.4AI score0.01018EPSS
Exploits0References29
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.3 views

SUSE CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

5.5CVSS5.6AI score0.00233EPSS
Exploits0References3
OSV
OSV
added 2021/11/16 7:15 p.m.4 views

CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

5.5CVSS6.1AI score0.00233EPSS
Exploits0References1
CVE
CVE
added 2021/11/16 6:18 p.m.48 views

CVE-2021-26327

The CVE-2021-26327 entry concerns AMD SNP Firmware. Affected component: AMD SNP Firmware; root cause: insufficient validation of guest context, leading to potential loss of guest confidentiality. Impact: confidentiality can be partially exposed (per CVSS notes), with local access required. Public...

5.5CVSS5.9AI score0.00233EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/16 6:18 p.m.29 views

CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

5.7AI score0.00233EPSS
Exploits0References1
Rows per page
Query Builder