285 matches found
ITScape
ITScape: KVM/arm64에서의 게스트-호스트 탈출 요약 이 문서는 Hyunwoo Kim @v4bel이 보고하고 패치한 ITScape CVE-2026-46316 취약점을 설명합니다. 이 취약점은 KVM/arm64 환경에서 게스트가 호스트로 탈출하여 커널root 권한으로 호스트에서 명령을 실행할 수 있게 하는 KVM 탈출 취약점입니다. 공개적으로 알려진 바로는, KVM/arm64를 대상으로 한 첫 번째 게스트-호스트 탈출 익스플로잇 연구입니다. ITScape는 KVM/arm64의 vGIC-ITS Interrupt...
CVE-2026-92524
A flaw was found in the Linux kernel's irqchip/gic-v3-its component. A resource leak occurs when the itsirqgicdomainalloc function fails to properly deallocate resources during error handling. This can lead to a denial of service DoS due to excessive memory consumption...
Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879,...
Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-15890
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
SUSE CVE-2026-92524
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
Linux Distros Unpatched Vulnerability : CVE-2026-92524
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for t...
CVE-2026-92524
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
DEBIAN-CVE-2026-92524
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
AZL-102741 CVE-2026-92524 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
CVE-2026-92524 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
CVE-2026-92524
CVE-2026-92524 affects the Linux kernel GIC-v3-ITS irqchip driver. The root cause is a resource leak in its_vpe_irq_domain_alloc(): when its_irq_gic_domain_alloc() fails, the subsequent its_vpe_irq_domain_free() does not invoke its_vep_teardown() for the corresponding interrupt, leaving the resou...
EUVD-2026-82145
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
CVE-2026-92524 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
CVE-2026-92524: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...
CVE-2026-89912
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the vgic-its component. A malicious guest virtual machine could trigger a null pointer dereference on the host system during a migration save operation. This could lead to a denial ...
CVE-2026-89912
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and vgicitssaveite dereferences it unconditionally. A guest that issues MAPD,...
AZL-101547 CVE-2026-89912 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and vgicitssaveite dereferences it unconditionally. A guest that issues MAPD,...
DEBIAN-CVE-2026-89912
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and vgicitssaveite dereferences it unconditionally. A guest that issues MAPD,...