Lucene search
K

17 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound UBSAN with byte size cells If a cell has 'nbits' equal to a multiple of BITSPERBYTE the logic p &= GENMASKcell-nbits%BITSPERBYTE - 1, 0; will become undefined behavior because nbits modulo BITSPERBYT...

7.8CVSS6.3AI score0.00022EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/25 12:30 p.m.1 views

EUVD-2026-15381

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ioniccreatecq struct ioniccqresp resp u32 cqid2; // offset 0 - PARTIALLY SET see below u8 udmamask; // offset 8 - SET resp.udmamask = vcq-udmamask u8 rsvd7; // offset 9 - NEVER SET udmamask &...

5.7AI score0.00017EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/03/10 10:52 a.m.2 views

kernel: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound UBSAN with byte size cells If a cell has 'nbits' equal to a multiple of BITSPERBYTE the logic p &= GENMASKcell-nbits%BITSPERBYTE - 1, 0; will become undefined behavior because nbits modulo BITSPERBYT...

7.8CVSS6.8AI score0.00022EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:4 a.m.2 views

SUSE CVE-2016-3158

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOT...

3.8CVSS6.1AI score0.00036EPSS
Exploits0References10
NVD
NVD
added 2016/04/13 4:59 p.m.23 views

CVE-2016-3158

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOT...

3.8CVSS4.3AI score0.00036EPSS
Exploits0References10
UbuntuCve
UbuntuCve
added 2016/04/13 4:59 p.m.29 views

CVE-2016-3158

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOT...

3.8CVSS6.8AI score0.00036EPSS
Exploits0References2
OSV
OSV
added 2016/04/13 4:59 p.m.0 views

UBUNTU-CVE-2016-3158

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOT...

3.8CVSS6.7AI score0.00036EPSS
Exploits0References3
Prion
Prion
added 2016/04/13 4:59 p.m.28 views

Design/Logic Flaw

The fpufxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits...

1.7CVSS3.9AI score0.00093EPSS
Exploits0References9Affected Software4
Cvelist
Cvelist
added 2016/04/13 4:0 p.m.34 views

CVE-2016-3158

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOT...

6AI score0.00036EPSS
Exploits0References10
OSV
OSV
added 2015/08/11 8:22 p.m.5 views

MGASA-2015-0310 Updated qemu package fixes security vulnerability

Matt Tait discovered that QEMU incorrectly handled the virtual PCNET driver. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process CVE-2015-3209. Kurt Seifried discovered that QEMU incorrectly handl...

7.8CVSS8.7AI score0.18024EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2015/07/14 12:0 a.m.19 views

FreeBSD : xen-tools -- PCI MSI mask bits inadvertently exposed to guests (4db8a0f4-27e9-11e5-a4a5-002590263bf5)

The Xen Project reports : The mask bits optionally available in the PCI MSI capability structure are used by the hypervisor to occasionally suppress interrupt delivery. Unprivileged guests were, however, nevertheless allowed direct control of these bits. Interrupts may be observed by Xen at...

7.8CVSS7.7AI score0.08429EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2015/06/15 12:0 a.m.239 views

Debian DSA-3284-1 : qemu - security update

Several vulnerabilities were discovered in qemu, a fast processor emulator. - CVE-2015-3209 Matt Tait of Google's Project Zero security team discovered a flaw in the way QEMU's AMD PCnet Ethernet emulation handles multi-TMD packets with a length above 4096 bytes. A privileged guest user in a gues...

7.8CVSS8.2AI score0.18024EPSS
Exploits0References19
OpenVAS
OpenVAS
added 2015/06/12 12:0 a.m.29 views

Citrix XenServer Multiple Security Updates (CTX201145)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

7.8CVSS7.8AI score0.08429EPSS
Exploits0References1
OSV
OSV
added 2015/06/10 2:30 p.m.1 views

USN-2630-1 qemu, qemu-kvm vulnerabilities

Matt Tait discovered that QEMU incorrectly handled the virtual PCNET driver. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, when QEMU is used with libvirt,...

7.8CVSS7.5AI score0.18024EPSS
Exploits0References7
OSV
OSV
added 2015/06/03 8:59 p.m.1 views

DEBIAN-CVE-2015-4104

Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service unexpected interrupt and host crash via unspecified vectors...

7.8CVSS8.1AI score0.08429EPSS
Exploits0References1
Prion
Prion
added 2015/06/03 8:59 p.m.8 views

Code injection

Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service unexpected interrupt and host crash via unspecified vectors...

7.8CVSS6.5AI score0.08429EPSS
Exploits0References16Affected Software1
Xen Project
Xen Project
added 2015/06/02 12:0 p.m.44 views

PCI MSI mask bits inadvertently exposed to guests

ISSUE DESCRIPTION The mask bits optionally available in the PCI MSI capability structure are used by the hypervisor to occasionally suppress interrupt delivery. Unprivileged guests were, however, nevertheless allowed direct control of these bits. IMPACT Interrupts may be observed by Xen at...

7.8CVSS7.9AI score0.08429EPSS
Exploits0Affected Software1
Rows per page
Query Builder