983 matches found
Xen: x86/AMD: Mismatch in IOMMU Quarantine Page Table Levels (XSA-445)
The current setup of quarantine page tables assumes that there are 4 page table levels, however the AMD-Vi IOMMU is configured with 3 page table levels for systems without RAM above the 512 GB boundary. Due to this level mismatch, the sink page the device gets read/write access to is no longer...
Xen Security Vulnerabilities
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that stems...
kernel: drm/amdgpu: SDMA update use unlocked iterator
A denial of service exists in the linux kernel such that there is a SDMA update page table may be called from an unlocked context, leading to damage to system availability and integrity...
PT-2023-7266 · Xen +2 · Xen +2
Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue arises from a mismatch in the IOMMU quarantine page table levels. On systems with no RAM above the 512GB mark, only 3 page-table levels are configured in the IOMMU, while the quaranti...
kernel: KVM: s390: pv: fix index value of replaced ASCE
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390replaceasce, the index of the new ASCE should also be set to 0. Having t...
kernel: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
A linked list corruption flaw was found in the Linux kernel's iommufd subsystem. During HWPT Hardware Page Table specific attachment, the same hwpt can be added to the ioas-hwptlist twice due to leftover code from a previous rework. This duplicate insertion corrupts the linked list structure,...
kernel: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix PTE marker handling in hugetlbchangeprotection Patch series "mm/hugetlb: uffd-wp fixes for hugetlbchangeprotection". Playing with virtio-mem and background snapshots using uffd-wp on hugetlb in QEMU, I managed to...
kernel: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Any codepath that zaps page table entries must invoke MMU notifiers to ensure that secondary MMUs like KVM don't keep accessing pages which aren't mapped anymore...
kernel security and bug fix update
3.10.0-1160.95.1.0.1.OL7 - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 3.10.0-1160.95.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 2481767...
PT-2025-53169
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM component related to the s390 virtualization platform. Specifically, an incorrect index value can be assigned to a replaced ASCE Address...
kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry
A vulnerability was found in followpagepte in mm/gup.c in the Linux Kernel. This issue occurs due to a race problem which can poison the page table entry and cause a denial-of-service...
kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry
A vulnerability was found in followpagepte in mm/gup.c in the Linux Kernel. This issue occurs due to a race problem which can poison the page table entry and cause a denial-of-service...
kernel: highmem: fix checks in __kmap_local_sched_{in,out}
In the Linux kernel, the following vulnerability has been resolved: highmem: fix checks in kmaplocalschedin,out When CONFIGDEBUGKMAPLOCAL is enabled kmaplocalschedin,out check that even slots in the tsk-kmapctrl.pteval are unmapped. The slots are initialized with 0 value, but the check is done wi...
kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry
A vulnerability was found in followpagepte in mm/gup.c in the Linux Kernel. This issue occurs due to a race problem which can poison the page table entry and cause a denial-of-service...
kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry
A vulnerability was found in followpagepte in mm/gup.c in the Linux Kernel. This issue occurs due to a race problem which can poison the page table entry and cause a denial-of-service...
The vulnerability of the RDMA emulator hardware component in QEMU allows a hacker to trigger a service failure.
The vulnerability of the RDMA hardware emulation component of QEMU is related to the allocation and initialization of a large number of page tables, which will be used as descriptors for CQ and asynchronous events. Exploiting this vulnerability can allow an attacker to cause a service failure...
DEBIAN-CVE-2023-1544
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of...
The vulnerability in the `follow_page_pte` function of the `mm/gup.c` file in the Linux kernel allows a hacker to trigger a service failure or gain unauthorized access to protected information.
The vulnerability of the followpagepte function in the mm/gup.c file of the Linux operating system’s kernel is related to the race condition. Exploiting this vulnerability can allow an attacker to cause a service failure or gain unauthorized access to protected information...
SUSE CVE-2009-2287
The kvmarchvcpuioctlsetsregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVMSETSREGS call, which allows local users to cause a denial of service crash or hang via a crafted cr3 value, which triggers a NULL pointer...