CVE-2022-48862

In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entries In vhostiotlbaddrangectx, range size can overflow to 0 when start is 0 and last is ULONGMAX. One instance where it can happen is when userspace sends an IOTLB message with...

SUSE CVE-2024-35814

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb "swiotlb: fix a braino in the alignment check fix", which was a fix for commit 0eee5ae10256 "swiotlb: fix slot alignment checks", causes...

CVE-2021-46967

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

CVE-2021-46967

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

CVE-2021-46967

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

UBUNTU-CVE-2021-46967

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

CVE-2021-46967 vhost-vdpa: fix vm_flags for virtqueue doorbell mapping

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

CVE-2021-46967 vhost-vdpa: fix vm_flags for virtqueue doorbell mapping

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma-flags like VMPFNMAP. This may cause several issues e.g when userspace trie...

kernel: Linux kernel: vhost-vdpa memory leak leading to Denial of Service

A flaw was found in the Linux kernel's vhost-vdpa component. This memory leak vulnerability occurs when an application using vhost-vdpa fails to properly invalidate I/O Translation Lookaside Buffer IOTLB entries or crashes. A local attacker or application could exploit this flaw, leading to memor...

GSD-2023-1000419 vhost-vdpa: fix an iotlb memory leak

vhost-vdpa: fix an iotlb memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit 4e92cb33bfb51eee5f28bb10846c46f266a4bb67,...

PT-2023-33492 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.0.18 Description: A memory leak issue was discovered when freeing IOTLBs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.19 through...

The vulnerability of the implementation of the address_space_translate_for_iotlb() function in the QEMU hardware emulation software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the addressspacetranslateforiotlb function in the QEMU hardware emulation implementation is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a attacker to cause a system failure or execute arbitrary code...

PT-2022-3768 · Qemu +4 · Qemu +4

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 7.0.0 Description: The issue in QEMU's softmmu/physmem.c file can lead to an uninitialized read on the translate fail path, resulting in an io readx or io writex crash. A third party notes that this might not be...

PT-2022-7474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a hung thread due to erroneous iotlb entries in the vhost component of the Linux kernel. Specifically, in vhost iotlb add range ctx, the range size can overflow t...

PT-2020-21659

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: iotlb to region mips, get page addr code mips, and tb fi...