UVI-2021-1001217 KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio

KVM: mmio: Fix use-after-free Read in kvmvmioctlunregistercoalescedmmio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

UVI-2021-1001170 KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow

KVM: PPC: Book3S: Fix HRTAS rets buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

GSD-2021-1001170 KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow

KVM: PPC: Book3S: Fix HRTAS rets buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

UVI-2021-1001163 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

GSD-2021-1001163 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

PT-2021-25633

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.13.5 Description: A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-29754

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.37 through 5.10.51 Description A use-after-free read issue was discovered in the KVM mmio subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.10....

PT-2021-25687

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.13.3 Description: A use-after-free read issue was discovered in the KVM mmio subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.1...

PT-2021-25782

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. This problem was introduced in version v4.18 and is fixed in Linux Kernel version...

PT-2021-29709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function when handling vcpu load. The actual impact and attack plausibility have not yet been proven. This issue...

PT-2021-29833

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and attack plausibility of this issue have not...

PT-2021-25714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-29777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2021-29628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.13.5 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl vcpu load function. The actual impact and attack plausibility have not yet been proven. This issue was introduced ...

PT-2021-25838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and potential for attack have not been fully determined...

PT-2021-25759

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.37 through 5.10.51 Description A use-after-free read issue was discovered in the KVM mmio handling. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.10.37 an...

PT-2021-25816

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.119 through 5.4.133 Description A use-after-free read issue was discovered in the KVM mmio subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.4.1...

PT-2021-29682

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.13.3 Description A use-after-free read issue was discovered in the KVM mmio component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.13...

PT-2021-29811

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.119 through 5.4.133 Description A use-after-free read issue was discovered in the KVM mmio component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.4.1...

CVE-2021-37576

A flaw was found on the Linux kernel. On the PowerPC platform, the KVM guest allows the OS users to cause host OS memory corruption via rtasargs.nargs. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation Mitigation for thi...