SUSE CVE-2023-54315

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/sriov: perform null check on iov before dereferencing iov Currently pointer iov is being dereferenced before the null check of iov which can lead to null pointer dereference errors. Fix this by moving the iov null...

AZL-61716 CVE-2024-26327 affecting package qemu for versions less than 8.2.0-16

An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations...

CVE-2024-26328

An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c does not set NumVFs to PCISRIOVTOTALVF, and thus interaction with hw/nvme/ctrl.c is mishandled...

PT-2024-1923 · Qemu +6 · Qemu +6

Name of the Vulnerable Software and Affected Versions: QEMU versions 7.1.0 through 8.2.1 Description: The issue is related to a buffer overflow in the dynamic memory of the QEMU hardware emulator, specifically in the register vfs function hw/pci/pcie sriov.c. This function does not set NumVFs to...