PT-2022-5267

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free memory flaw was found in the Linux kernel, specifically in the Intel GVT-g graphics driver, which triggers VGA card system resource overload. This issue could allow a local...

UVI-2021-1001726 drm/i915/gvt: fix the usage of ww lock in gvt scheduler.

drm/i915/gvt: fix the usage of ww lock in gvt scheduler. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001726 drm/i915/gvt: fix the usage of ww lock in gvt scheduler.

drm/i915/gvt: fix the usage of ww lock in gvt scheduler. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

PT-2021-30191

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to the usage of a ww lock in the gvt scheduler. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26196

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the usage of a ww lock in the gvt scheduler. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

Incorrect use of operator leads to arbitrary minting of GVT tokens

Handle 0xRajeev Vulnerability details Impact The distributeStrategyGainLoss function distributes any gains or losses generated from a harvest and is expected to be called only by valid protocol vault adaptors. It is an externally visible function and the access control is indirectly enforced on...

CVE-2019-11085

A flaw was found in the Linux kernel's implementation of GVT-g which allowed an attacker with access to a 'passed through' Intel i915 graphics card to possibly access resources allocated to other virtual machines, crash the host, or possibly corrupt memory leading to privilege escalation...

kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation

A flaw was found in the Linux kernel's implementation of GVT-g which allowed an attacker with access to a 'passed through' Intel i915 graphics card to possibly access resources allocated to other virtual machines, crash the host, or possibly corrupt memory leading to privilege escalation...

PT-2018-10494

Name of the Vulnerable Software and Affected Versions GVToken Genesis Vision GVT affected versions not specified Description The issue concerns an integer overflow in the mint function of the GVToken Genesis Vision GVT smart contract, which runs on Ethereum. This overflow allows the contract owne...

CVE-2018-11335

CVE-2018-11335 describes a vulnerability in GVToken Genesis Vision (GVT), a smart contract on Ethereum. The mint function contains an integer overflow that allows the contract owner to arbitrarily retrieve minted tokens. The issue is rooted in arithmetic handling within mint, enabling the owner t...

CVE-2018-11335: Integer Overflow or Wraparound

GVToken Genesis Vision GVT is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Cleaning up my GOPATH with Homebrew

tl;dr: use the script at the bottom to go get into the Homebrew "Cellar" and keep your GOPATH clean. I personally like GOPATH and import paths, but while trying to reduce my laptop to a thin reproducible client, I felt the pain of keeping track of the hundreds of repositories that end up in there...

Analyzing Go Vendoring with BigQuery

GitHub published a snapshot of all the public open-source repositories to BigQuery and Francesc used it to draw some cool statistics about Go projects. I used the same dataset to analyze how the Go ecosystem does vendoring. Disclosure: there's some ego stroking here, as I'm the author of gvt. Try...