CVE-2025-31356

CVE-2025-31356 affects Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor. The issue is insufficient verification of data authenticity, potentially enabling information disclosure by a system software adversary with privileged access and high attack complexity, via local ac...

CVE-2026-20760

CVE-2026-20760 relates to improper handling of memory range overlap in some Intel processor microcode affecting Ring 0: Hypervisor. It may allow escalation of privilege via a local, low-complexity attack with no user interaction; impact is high on confidentiality, integrity, and availability. Det...

CVE-2026-20760

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2026-20760

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

...

amt: re-read skb header pointers after every pull

...

PT-2026-70271

Name of the Vulnerable Software and Affected Versions IntelR Trust Domain Extensions IntelR TDX affected versions not specified Description Insufficient verification of data authenticity within Ring 0: Hypervisor may lead to information disclosure. A system software adversary with privileged user...

CVE-2025-35973: Improper Handling of Values

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

ALSA-2026:53329 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 kernel:...

PT-2026-70802

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Incorrect data forwarding during transient execution within Ring 0 Hypervisor and Kernel may lead to the exposure of sensitive information. A system software adversary with privileg...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

The vulnerability of the VMXNET3 virtual network adapter of the VMware ESX hypervisor allows a hacker to execute arbitrary code.

The vulnerability of the VMXNET3 virtual network adapter in the VMware ESX hypervisor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

[SECURITY] [DSA 6424-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6424-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 09, 2026 https://www.debian.org/security/faq -...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the lack of a limit in the retry mechanism for CPU entropy instructions in the native entropy source. An attacker can cause the application to hang indefinitely by triggering persistent failures in the on-chip entro...

CVE-2026-50540

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an...

CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

PT-2026-69150

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 4.0.0 Description The kata-runtime allows host code execution due to an unvalidated configuration path annotation. The runtime accepts an arbitrary io.katacontainers.config path pod annotation and loads the...

CVE-2023-20585

A flaw was found in hw. Insufficient checks of the RMP on host buffer access in the Input-Output Memory Management Unit IOMMU allows an attacker with privileges and a compromised hypervisor to trigger an out-of-bounds condition without RMP checks. This issue results in the potential loss of guest...