Lucene search
+L

10 matches found

osv_azl
osv_azl
•added 2026/09/25 11:17 a.m.•6 views

AZL-108225 CVE-2026-98156 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

7.8CVSS5.9AI score0.00134EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2021-28039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0...

6.5CVSS6.6AI score0.00424EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/03/05 6:15 p.m.•46 views

CVE-2021-28039

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has...

6.5CVSS6.8AI score0.00424EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/03/05 12:00 a.m.•92 views

CVE-2021-28039

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has...

6.5CVSS6.2AI score0.00424EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/03/05 12:00 a.m.•54 views

CVE-2021-28039

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has...

6.4AI score0.00424EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/08/20 1:01 p.m.•13 views

dpdk: Information exposure in unchecked guest physical to host virtual address translations

The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory...

6.1CVSS6.6AI score0.00848EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/06/26 7:01 p.m.•16 views

dpdk: Information exposure in unchecked guest physical to host virtual address translations

The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory...

6.1CVSS6.6AI score0.00848EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2018/06/04 12:00 a.m.•29 views

SUSE SLES12 Security Update : dpdk-thunderxdpdk (SUSE-SU-2018:1492-1)

This update fixes the following issues : - CVE-2018-1059: The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest...

6.1CVSS6.5AI score0.00848EPSS
SaveExploits0References4
CVE
CVE
•added 2018/04/24 6:00 p.m.•165 views

CVE-2018-1059

The CVE concerns the DPDK vhost-user interface, where Guest Physical Addresses to Host Virtual Addresses translations do not verify that the requested guest physical range is fully mapped and contiguous. This can expose vhost-user backend memory to a malicious guest. The vulnerability affects all...

6.1CVSS5.8AI score0.00848EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/24 12:00 a.m.•6 views

CVE-2018-1059: Exposure of Sensitive Information to an Unauthorized Actor

The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions...

6.1CVSS6.7AI score0.00848EPSS
SaveExploits0References3
Rows per page
Query Builder