SUSE CVE-2019-14821

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvmcoalescedmmio' object, wherein write indices 'ring-first' and 'ring-last'...

AlmaLinux 9 : qemu-kvm (ALSA-2022:5263)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5263 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

DEBIAN-CVE-2019-14821

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvmcoalescedmmio' object, wherein write indices 'ring-first' and 'ring-last'...

Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform

The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...

The vulnerability of the kvm_ioctl_create_device function in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the kvmioctlcreatedevice function in the virt/kvm/kvmmain.c file of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or increase their privileges through special...

CVE-2016-10150

Use-after-free vulnerability in the kvmioctlcreatedevice function in virt/kvm/kvmmain.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service host OS crash or possibly gain privileges via crafted ioctl calls on the /dev/kvm device...

CVE-2016-10150

Use-after-free vulnerability in the kvmioctlcreatedevice function in virt/kvm/kvmmain.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service host OS crash or possibly gain privileges via crafted ioctl calls on the /dev/kvm device...

Linux kvm_apic_has_events() function null pointer reference vulnerability

Linux Kernel is an open source operating system. A null pointer reference vulnerability in the Linux Kernel kvmapichasevents function allows users with access to /dev/kvm to crash the system...

UBUNTU-CVE-2014-3690

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service system disruption by...

PT-2014-5453 · Qemu +6 · Qemu +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.17.2 Description: The issue allows host OS users to kill arbitrary processes or cause a denial of service by leveraging /dev/kvm access. This can be demonstrated through PR SET TSC prctl calls within a modifie...

Linux Kernel空指针引用本地拒绝服务漏洞(CVE-2013-5634)

BUGTRAQ ID: 61995 CVECAN ID: CVE-2013-5634 Linux Kernel是Linux操作系统的内核。 适用于ARM平台、支持CONFIGKVM的Linux kernel在KVM设备上执行ioctlKVMGETREGLIST调用时没有首先正确初始化vCPU，存在空指针引用漏洞，本地攻击者可利用此漏洞造成内核崩溃。 0 Linux kernel 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device...

CVE-2010-3881

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device...

PT-2010-5664 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.36.2 Description: The issue involves multiple vulnerabilities in the Linux kernel and SUSE Linux Enterprise packages, including kernel-desktop-devel,...