PT-2026-94663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Legacy I/O and memory sysfs handlers fail to verify security locked downLOCKDOWN PCI ACCESS, leaving legacy io and legacy mem files unprotected during kernel lockdown. This allows a root...

PT-2026-96606

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci write legacy io pci write legacy io loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; retur...

MiracleLinux 9 : qemu-kvm-7.0.0-13.el9 (AXSA:2023-4972:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4972:01 advisory. QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free CVE-2021-3750 QEMU: fdc: heap buffer overflow in DMA read data transfers CVE-2021-3507...

PT-2023-12178

Name of the Vulnerable Software and Affected Versions HyperKit versions 0.20210107 and prior Description HyperKit is a toolkit for embedding hypervisor capabilities in an application. The issue arises from a call to vc cfgwrite in vi pci write that does not check for null, which can cause the hos...

PT-2022-23530 · Xhyve · Xhyve

Name of the Vulnerable Software and Affected Versions: xhyve version dfbe09b Description: The issue is related to a NULL pointer dereference via the vi pci write component. This allows attackers to cause a Denial of Service via unspecified vectors. Recommendations: For xhyve version dfbe09b,...

OSV-2022-586 Heap-use-after-free in op_pci_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49107 Crash type: Heap-use-after-free READ 4 Crash state: oppciwrite genericfuzz fuzz.c...

PT-2022-37749

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49107 Crash type: Heap-use-after-free READ 4 Crash state: op pci write generic fuzz fuzz.c...

QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition...