PT-2021-25418

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns the use of incorrect inherited permissions to get shadow pages in the X86 MMU of KVM. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-25491

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue concerns the use of incorrect inherited permissions to get shadow pages in the X86 MMU of KVM. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2021-25314

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.273 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-25302

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.273 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-25345

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.195 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-29464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.10.46. The actual impact and attack plausibility...

PT-2021-25384

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been...

PT-2021-29396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue concerns the KVM x86 component, specifically the handling of the MMU context when the SMM flag is cleared. The actual impact and potential for attack have not been fully determined...

PT-2021-25549

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue concerns the KVM x86 component, specifically related to the handling of the MMU context when the SMM flag is cleared. The actual impact and potential for attack have not been full...

PT-2021-25512

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM x86. It was introduced in version v5.4 and fixed in version v5.12.11. The actual impact and attack...

PT-2021-25521

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been...

PT-2021-29462

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue concerns the KVM x86 component, specifically the handling of the MMU context when the SMM flag is cleared. The actual impact and potential for attack have not been proven yet...

PT-2021-25420

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-29308

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been prove...

PT-2021-25328

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.237 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-29359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.195 Description The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29506

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in version v5.4 and fixed in version v5.12.11. The actual impact and...

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1994)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...