PT-2026-72742

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the qat vf resume write function. The function verifies the f pos variable before acquiring the migf-lock, but it performs the copy operation into the...

kernel: vhost-net: guest to host kernel escape during migration

A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this fla...