546 matches found
CVE-2025-52534
Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity...
AMD EPYC 9005 Series 安全漏洞
The AMD EPYC 9005 Series is a series of processors developed by American semiconductor company AMD. The AMD EPYC 9005 Series contains security vulnerabilities, which stem from improper bounds checking. These vulnerabilities may lead to writes to host memory and loss of integrity...
CVE-2026-23086
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peerbufalloc, which is set from the remote endpoint's SOVMSOCKETSBUFFERSIZE value. On the host side this means that the...
CVE-2026-23086
Technical details about CVE-2026-23086 are not publicly available in the provided connected documents; monitor vendor advisories and official CVE writeups for updates.
CVE-2026-23086 vsock/virtio: cap TX credit to local buffer size
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peerbufalloc, which is set from the remote endpoint's SOVMSOCKETSBUFFERSIZE value. On the host side this means that the...
Linux Distros Unpatched Vulnerability : CVE-2026-23086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peerbufalloc, which is set from the remote endpoint's...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001476)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001476 advisory. A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by t...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002239)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002239 advisory. Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002171)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002171 advisory. The ioapicreadindirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPICREGSELECT and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002192)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002192 advisory. The ioapicreadindirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPICREGSELECT and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002403)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002403 advisory. The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, whic...
Astra Linux – Vulnerability in containerd-app
Containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation, where a user may exhaust memory on the host due to goroutine leaks. This issue has...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56756)
nvme-pci: vulnerability involves an incorrect size being passed to dmafreecoherent in nvme-pci due to nvmeallochostmem potentially using fewer descriptors than planned, which is fixed by ensuring the correct size is used for freeing the HMB descriptor table. This plugin only works with Tenable.ot...
containerd CRI server: Host memory exhaustion through Attach goroutine leak
...
CVE-2025-64329 containerd CRI server: Host memory exhaustion through Attach goroutine leak
containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...
containerd 安全漏洞
containerd is an industry-standard container runtime open-sourced by containerd. A security vulnerability exists in containerd versions 1.7.28 and earlier, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1, which stems from a goroutine in the CRI Attach...
containerd CRI server: Host memory exhaustion through Attach goroutine leak
Impact A bug was found in containerd's CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. Repetitive calls of CRI Attach e.g., kubectl attach could increase the memory usage of containerd. Patches This bug has been fixed in the following containerd...
EUVD-2016-10646
Malware in sbrugna...