CVE-2022-3169

A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver, resulting in a PCIe link disconnect...

CVE-2022-3169

A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver, resulting in a PCIe link disconnect...

PT-2022-7379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free UAF vulnerability in the nvme-tcp module of the Linux kernel. This vulnerability can be exploited to impact the confidentiality, integrity, and...

CVE-2021-3929

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

DEBIAN-CVE-2021-3929

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

AZL-35152 CVE-2021-3929 affecting package qemu for versions less than 6.2.0-18

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

Design/Logic Flaw

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

CVE-2021-3929

CVE-2021-3929 concerns a DMA reentrancy/use-after-free in QEMU’s NVMe emulation. The issue occurs when a reentrancy write triggers nvme_ctrl_reset(), freeing data structures and potentially allowing a local guest to crash the host QEMU process or execute code within the host context. Connected do...

CVE-2021-3929

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

CVE-2021-3929: Use After Free

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

PT-2024-11777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability has been resolved in the Linux kernel. The issue was triggered by blktests nvme/004 and resulted in a user-memory-access bug in the blk mq complete request...

SUSE: Security Advisory (SUSE-SU-2022:2687-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2687-1 Security update for fwupd

This update for fwupd fixes the following issues: - Ignore non-PCI NVMe devices e.g. NVMe-over-Fabrics when probing bsc1193921 - package was rebuilt with new UEFI secure boot key. bsc1198581...

PT-2022-37514 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue with fwupd involves ignoring non-PCI NVMe devices, such as NVMe-over-Fabrics, when probing. Additionally, the package was rebuilt with a new UEFI secure boot key. Recommendations: A...

device-mapper-multipath bug fix and enhancement update

An update is available for device-mapper-multipath. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The device-mapper-multipath packages provide tools that use t...

GSD-2022-1004156 nvme: use struct group for generic command dwords

nvme: use struct group for generic command dwords This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

PT-2022-32418

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to the use of struct group for generic command dwords in nvme. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

GSD-2022-1004071 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags

nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003991 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags

nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003877 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags

nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...