Lucene search
+L

639 matches found

osv_azl
osv_azl
•added 2023/01/09 11:15 a.m.•20 views

AZL-12951 CVE-2022-2196 affecting package kernel for versions less than 5.15.102.1-1

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM L0 advertising eIBRS support to L1. An attacker at L2 with code...

8.8CVSS7.2AI score0.00288EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/12/19 12:00 a.m.•29 views

Mageia: Security Advisory (MGASA-2022-0477)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.00485EPSS
SaveExploits1References8
osv_mgasa
osv_mgasa
•added 2022/12/17 11:55 p.m.•25 views

MGASA-2022-0477 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.82 and fixes atleast the following security issues: A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver,...

7.8CVSS6.9AI score0.00485EPSS
SaveExploits1References7
osv_mgasa
osv_mgasa
•added 2022/12/17 11:55 p.m.•21 views

MGASA-2022-0478 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.82 and fixes atleast the following security issues: A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the drive...

7.8CVSS6.7AI score0.00485EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/12/06 5:58 p.m.•48 views

CVE-2022-45869

A flaw was found in the Linux kernel in the KVM. A race condition in directpagefault allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualization and the TDP MMU are enabled. Mitigation This vulnerability can be mitigated by disabling th...

5.5CVSS2.9AI score0.00253EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
•added 2022/12/03 8:00 a.m.•8 views

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.

...

5.5CVSS6.3AI score0.00253EPSS
SaveExploits1
osv_azl
osv_azl
•added 2022/11/30 5:15 a.m.•25 views

AZL-11574 CVE-2022-45869 affecting package kernel for versions less than 5.15.82.1-1

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.7AI score0.00253EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/11/30 5:15 a.m.•6 views

DEBIAN-CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.5AI score0.00253EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/11/30 5:15 a.m.•9 views

UBUNTU-CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.8AI score0.00253EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2022/11/30 12:00 a.m.•7 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 6.1-rc6 and prior versions, which stems from a race condition in its x86 KVM subsystem that allows guest operating system users ...

5.5CVSS6.8AI score0.00253EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2022/11/30 12:00 a.m.•15 views

CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.3AI score0.00253EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/11/23 12:00 a.m.•26 views

PT-2022-6256 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 6.1-rc6 Description: A race condition in the x86 KVM subsystem allows guest OS users to cause a denial of service, resulting in a host OS crash or host OS memory corruption when nested virtualisation and the TDP...

9.8CVSS6.8AI score0.6777EPSS
SaveExploits229References1876
RedHat Linux
RedHat Linux
•added 2022/11/15 11:55 a.m.•15 views

kernel: KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 Remove WARNs that sanity check that KVM never lets a triple fault for L2 escape and incorrectly end up in L1. In normal operation, the sanity check is...

5.5CVSS6.2AI score0.00299EPSS
SaveExploits0References5
CNVD
CNVD
•added 2022/11/14 12:00 a.m.•155 views

Linux kernel has unspecified vulnerabilities (CNVD-2022-77501)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel has a security vulnerability that stems from a flaw discovered in the AMD nested virtualization SVM of KVM. A malicious L1 guest may intentionally not intercept the shutdown of a...

5.5CVSS0.9AI score0.00226EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/11/08 9:32 a.m.•29 views

kernel: KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 Remove WARNs that sanity check that KVM never lets a triple fault for L2 escape and incorrectly end up in L1. In normal operation, the sanity check is...

5.5CVSS6.2AI score0.00299EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2022/10/29 7:00 a.m.•12 views

A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2) possibly leading to a page fault and kernel panic in the host (L0).

...

5.5CVSS7.3AI score0.00226EPSS
SaveExploits0
NVD
NVD
•added 2022/10/25 5:15 p.m.•36 views

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS0.00226EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2022/10/25 5:15 p.m.•19 views

AZL-11352 CVE-2022-3344 affecting package kernel for versions less than 5.15.82.1-1

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS6.7AI score0.00226EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2022/10/25 5:15 p.m.•17 views

DEBIAN-CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS6.6AI score0.00226EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/10/25 5:15 p.m.•13 views

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS7.2AI score0.00226EPSS
SaveExploits0References2
Rows per page
Query Builder