10 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002101)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002101 advisory. The emsysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to ga...
Oracle: Security Advisory (ELSA-2015-3054)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3055)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3055 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502741 CVE-2015-0239 CVE-2015-0239 - x86/tls: Validate TLS entries to protect espfix...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3054)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3054 advisory. - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502740 CVE-2015-0239 CVE-2015-0239 - x86/tls: Validate TLS entries to protect espfix...
Unbreakable Enterprise kernel security update
2.6.39-400.250.9 - x86, tls: Interpret an all-zero struct userdesc as 'no segment' Andy Lutomirski Orabug: 21514969 - x86, tls, ldt: Stop checking lm in LDTempty Andy Lutomirski Orabug: 21514969 2.6.39-400.250.8 - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502740 CVE-2015-0239...
OracleVM 3.3 : kernel-uek (OVMSA-2015-0104)
The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502739 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid executables Jann Horn Orabug: 21502254 CVE-2015-3339 -...
kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code
It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this flaw to escalate their privileges by tricking the hypervisor to emulate a SYSENTER instruction in 16-bit mode, if the guest OS did not initialize the...
MGASA-2015-0219 Updated kernel-tmb packages fix security vulnerabilities
This kernel-tmb update is based on upstream -longterm 3.14.41 and fixes the following security issues: It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions from user space via the uverbs API. A local user with access...
PT-2015-4535 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.18.5 Description: The issue allows guest OS users to gain guest OS privileges or cause a denial of service guest OS crash by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction,...
UBUNTU-CVE-2015-0239
The emsysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service guest OS crash by triggering use of a 16-bit code segment for emulation of a...