Lucene search
K

30 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000665 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to...

5.5CVSS6.7AI score0.001EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002169 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to...

5.5CVSS6.7AI score0.001EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001964 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to...

5.5CVSS6.7AI score0.001EPSS
Exploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2014-3603

Malware in sbrugna...

5.5CVSS6.6AI score0.001EPSS
Exploits0References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-2666

Malware in sbrugna...

6.3CVSS7.3AI score0.00297EPSS
Exploits0References9
OSV
OSV
added 2025/07/19 12:15 p.m.0 views

UBUNTU-CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

5.5CVSS6AI score0.00081EPSS
Exploits0References27
CVE
CVE
added 2025/07/19 11:59 a.m.62 views

CVE-2025-38351

CVE-2025-38351 affects the Linux kernel KVM component (x86) when Hyper-V hypercalls are enabled. The issue arises in PV TLB flush processing where non-canonical GVAs can reach INVVPID/INVLPGA paths, potentially triggering VM-Fail on Intel hardware (AMD may ignore). In practice, this can allow a g...

5.5CVSS7.1AI score0.00081EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/25 12:0 a.m.1 views

PT-2025-30134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the KVM component related to handling hypercalls HVCALL FLUSH VIRTUAL ADDRESS LIST and HVCALL FLUSH VIRTUAL ADDRESS LIST EX within KVM guests utilizin...

6.8CVSS6.4AI score0.00081EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:28 a.m.2 views

SUSE CVE-2014-3646

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service guest OS crash via a crafted application...

5.5CVSS6.3AI score0.001EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2019/05/13 12:0 a.m.28 views

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1480)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. ...

7.8CVSS7.3AI score0.68892EPSS
Exploits28References22
CNVD
CNVD
added 2016/01/28 12:0 a.m.2 views

Xen 'paging_invlpg' function denial of service vulnerability

Xen is an open source virtual machine monitor product developed by the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in t...

6.3CVSS8.2AI score0.00297EPSS
Exploits0References1
NVD
NVD
added 2016/01/22 3:59 p.m.16 views

CVE-2016-1571

The paginginvlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service host crash via a non-canonical guest address in an INVVPID instruction, which triggers a...

6.3CVSS6.7AI score0.00297EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2016/01/22 3:59 p.m.23 views

CVE-2016-1571

The paginginvlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service host crash via a non-canonical guest address in an INVVPID instruction, which triggers a...

6.3CVSS6.9AI score0.00297EPSS
Exploits0References2
Prion
Prion
added 2016/01/22 3:59 p.m.22 views

Design/Logic Flaw

The paginginvlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service host crash via a non-canonical guest address in an INVVPID instruction, which triggers a...

4.7CVSS6.5AI score0.00297EPSS
Exploits0References4Affected Software2
Debian CVE
Debian CVE
added 2016/01/22 3:0 p.m.29 views

CVE-2016-1571

The paginginvlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service host crash via a non-canonical guest address in an INVVPID instruction, which triggers a...

6.3CVSS4.4AI score0.00297EPSS
Exploits0
Cvelist
Cvelist
added 2016/01/22 3:0 p.m.22 views

CVE-2016-1571

The paginginvlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service host crash via a non-canonical guest address in an INVVPID instruction, which triggers a...

6.3AI score0.00297EPSS
Exploits0References4
Xen Project
Xen Project
added 2016/01/20 12:0 p.m.76 views

VMX: intercept issue with INVLPG on non-canonical address

ISSUE DESCRIPTION While INVLPG does not cause a General Protection Fault when used on a non-canonical address, INVVPID in its "individual address" variant, which is used to back the intercepted INVLPG in certain cases, fails in such cases. Failure of INVVPID results in a hypervisor bug check...

6.3CVSS0.1AI score0.00297EPSS
Exploits0Affected Software1
FreeBSD
FreeBSD
added 2016/01/20 12:0 a.m.35 views

xen-kernel -- VMX: intercept issue with INVLPG on non-canonical address

The Xen Project reports: While INVLPG does not cause a General Protection Fault when used on a non-canonical address, INVVPID in its "individual address" variant, which is used to back the intercepted INVLPG in certain cases, fails in such cases. Failure of INVVPID results in a hypervisor bug...

6.3CVSS1.6AI score0.00297EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2015/03/03 12:49 p.m.2 views

kernel: kvm: vmx: invvpid vm exit not handled

It was found that the Linux kernel's KVM subsystem did not handle the VM exits gracefully for the invvpid Invalidate Translations Based on VPID instructions. On hosts with an Intel processor and invppid VM exit support, an unprivileged guest user could use these instructions to crash the guest...

5.5CVSS6.7AI score0.001EPSS
Exploits0References4
Mageia
Mageia
added 2015/02/19 2:43 p.m.58 views

Updated kernel-rt packages fix security vulnerabilities

This kernel-rt update provides as upgrade to upstream 3.14 longterm branch, currently based on 3.14.32 and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types,...

10CVSS7.8AI score0.68892EPSS
Exploits37References35
Rows per page
Query Builder