325 matches found
CVE-2025-58149 Incorrect removal of permissions on PCI device unplug
When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...
CVE-2025-58149
CVE-2025-58149 affects the Xen hypervisor. The detach logic for PCI devices fails to remove access permissions to 64‑bit memory BARs when a device is unplugged, allowing PV guests to access memory of devices no longer assigned to them (HVM implications noted with required compromised device model...
Siemens SIMATIC Devices Use After Free (CVE-2023-47233)
The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this could be exploited in a real world scenario. This is related to...
EUVD-2017-14629
Malware in sbrugna...
EUVD-2017-14680
Malware in sbrugna...
EUVD-2015-7200
Malware in sbrugna...
EUVD-2016-1343
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414307)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414307 advisory. The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a...
EUVD-2024-51904
Malicious code in bioql PyPI...
EUVD-2025-13187
Malicious code in bioql PyPI...
EUVD-2025-11276
Malicious code in bioql PyPI...
EUVD-2023-43974
Malicious code in bioql PyPI...
EUVD-2024-53854
Malicious code in bioql PyPI...
EUVD-2025-25577
Malicious code in bioql PyPI...
EUVD-2025-31942
Malicious code in bioql PyPI...
EUVD-2025-31986
Malicious code in bioql PyPI...
EUVD-2023-59819
Malicious code in bioql PyPI...
CVE-2022-50453
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash the kernel by requesting lines, unbinding the GPIO device, then calling any of the system calls relevant to the GPIO character device's...
CVE-2022-50453 gpiolib: cdev: fix NULL-pointer dereferences
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash the kernel by requesting lines, unbinding the GPIO device, then calling any of the system calls relevant to the GPIO character device's...
CVE-2022-50453
CVE-2022-50453 affects the Linux kernel (gpiolib: cdev). The vulnerability arises from NULL-pointer dereferences when userspace can trigger GPIO syscalls on a hot-unplugged GPIO device, allowing races where a device is removed after a NULL check. The fix partially mitigates by verifying gdev->...