RHSA-2011:0534 Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2010:0627 Red Hat Security Advisory: kvm security and bug fix update

Bulletin has no description...

RHSA-2010:0271 Red Hat Security Advisory: kvm security, bug fix and enhancement update

Bulletin has no description...

RHSA-2010:0126 Red Hat Security Advisory: kvm security and bug fix update

Bulletin has no description...

RHSA-2010:0088 Red Hat Security Advisory: kvm security and bug fix update

Bulletin has no description...

RHSA-2009:1659 Red Hat Security Advisory: kvm security and bug fix update

Bulletin has no description...

CVE-2024-46707 KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is...

CVE-2024-46707

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is...

CVE-2024-46707

CVE-2024-46707 affects the Linux kernel KVM for arm64. When a guest is configured without vGICv3 and the host cannot emulate GICv2, writes to ICC_SGI EL1 are trapped to EL2, leading to an attempted SGI emulation that dereferences a NULL interrupt pointer. The public details confirm the root cause...

CVE-2024-46707 KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is...

CVE-2024-46689

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...

RHSA-2010:0998 Red Hat Security Advisory: kvm security and bug fix update

Bulletin has no description...

CVE-2024-46689

CVE-2024-46689 affects the Linux kernel function soc: qcom: cmd-db. The root cause is mapping the shared cmd-db memory region as WB instead of WC, which can trigger an XPU write-protection false positive that leads to a secure interrupt and an endless loop in Trust Zone. Qualcomm Hypervisor curre...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7005-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7005-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7008-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7008-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7004-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7004-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

Oracle Linux 9 : kernel (ELSA-2024-6567)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6567 advisory. - usb-storage: alauda: Check whether the media is initialized CKI Backport Bot RHEL-43716 CVE-2024-38619 - mm: avoid overflows in dirty throttling logi...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2024-2418)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel: scsi: core: Put LLD module refcnt after SCSI device is releasedCVE-2021-47480 kernel: dm rq: don't queue request to blk-mq during DM...

Ubuntu: Security Advisory (USN-7003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-41070)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41070 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in...