23 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Added validation for the used length. This addition ensures that the used length is validated which may come from an untrusted device, to prevent data corruption or loss...
hwrng: virtio: clamp device-reported used.len at copy_data()
...
SUSE CVE-2026-64456
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
CVE-2026-64456
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
UBUNTU-CVE-2026-64456
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
CVE-2026-64456 hwrng: virtio: clamp device-reported used.len at copy_data()
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
CVE-2026-64456 hwrng: virtio: clamp device-reported used.len at copy_data()
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
CVE-2026-64456
CVE-2026-64456 affects the Linux kernel virtio-rng driver. A malicious or buggy virtio-rng backend can over-report used.len to trap memcpy past the inline data buffer, reading adjacent slab memory. This enables a potential cross-boundary data leak of guest-kernel heap contents via /dev/hwrng and ...
CVE-2026-64456
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
kernel: Fix of 39 CVEs
nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986901)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986901 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from a...
SUSE CVE-2021-47352
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from an untrusted device to avoid data corruption or loss...
DEBIAN-CVE-2021-47352
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from an untrusted device to avoid data corruption or loss...
UBUNTU-CVE-2021-47352
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from an untrusted device to avoid data corruption or loss...
CVE-2021-47352 virtio-net: Add validation for used length
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from an untrusted device to avoid data corruption or loss...
CVE-2021-47352
CVE-2021-47352 affects the Linux kernel’s virtio-net code. The issue arises from missing validation of the length reported by a device, which could lead to data corruption or loss. Affected context is confirmed by MiracleLinux/Nessus advisories that reference “virtio-net: Add validation for used ...
UVI-2021-1001476 virtio_console: Assure used length from device is limited
virtioconsole: Assure used length from device is limited This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.276 by commit...
PT-2021-25658
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...
PT-2021-29910
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilitie...
PT-2021-29692
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.13.3 Description The issue concerns the virtio-net component, where validation for used length is added. This change is intended to aid in the discovery of potential security vulnerabilities. The actual impact...