CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947: Out-of-bounds Read

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

PT-2022-10918 · Qemu +1 · Qemu +1

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A stack-buffer-overflow was found in the NVME component of QEMU. The issue lies in the nvme changed nslist function, where a malicious guest controlling certain input can read out of bounds...

February 15, 2022—KB5010427 (OS Build 17763.2628) Preview

None None...

PT-2022-11495

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.0 through 5.5 Description An issue was discovered in NvmExpressDxe due to an Untrusted Pointer Dereference, causing SMM memory corruption. This allows an attacker to write fixed or predictable data to SMRAM,...

PT-2022-7646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible use-after-free in the transport error recovery work of the nvme-tcp module. This occurs when nvme tcp submit async event work checks the control and...

PT-2022-7645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the nvme rdma error recovery work function. This vulnerability can be exploited due to a race condition, potentially affecting t...

PT-2022-7643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible use-after-free condition in the Linux kernel's NVMe driver. This condition may occur when the driver executes its reset ctrl work and the ctrl sends an...

PT-2025-8547 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the nvme component, where a change has been made to use a struct group for generic command dwords. This...

QEMU Resource Management Error Vulnerability (CNVD-2024-14789)

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in the NVM Express Controller NVME emulation in QEMU that stems from a data structure being released when a reentrant write...

GSD-2021-1002202 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002202 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002133 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002133 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

GSD-2021-1002067 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

UVI-2021-1002067 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

PT-2021-26603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.14.15 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.76 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.14.15 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...