1272 matches found
ALBA-2020:5494 virt:rhel bug fix update
Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...
Linux kernel memory leak vulnerability (CNVD-2021-19430)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in romfsdevread in fs/romfs/storage.c in Linux kernel versions prior to 5.8.4. An...
Integer overflow
u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM925...
Race condition
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wir...
[SECURITY] Fedora 33 Update: dpdk-19.11.3-1.fc33
The Data Plane Development Kit is a set of libraries and drivers for fast packet processing in the user space...
FreeBSD-SA-20:21.usb_net
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...
USN-4440-1: linux kernel vulnerabilities
It was discovered that the network block device nbd implementation in the Linux kernel did not properly check for error conditions in some situations. An attacker could possibly use this to cause a denial of service system crash. CVE-2019-16089 It was discovered that the kernel-user space relay...
CVE-2019-14099
Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C...
CVE-2019-14099
Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C...
CVE-2019-14099
CVE-2019-14099 affects Qualcomm Snapdragon devices (multiple product lines) where device misbehavior occurs if user-space passes an incorrect offset, length, or number of buffers. The Initial Description lists affected Snapdragon families (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voic...
Moderate: Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update
The updated Advanced Virtualization module is now available for Red Hat Enterprise Linux 8.2.1 Advanced Virtualization. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products. This update fixes a...
USN-4439-1: Linux kernel vulnerabilities
It was discovered that the network block device nbd implementation in the Linux kernel did not properly check for error conditions in some situations. An attacker could possibly use this to cause a denial of service system crash. CVE-2019-16089 It was discovered that the btrfs file system...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4425-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4425-1 advisory. It was discovered that the network block device nbd implementation in the Linux kernel did not properly check for error conditions in some...
CVE-2020-15368
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...
Design/Logic Flaw
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...
CVE-2020-15368
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2020-15368
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...
CVE-2020-15368
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...
CVE-2020-15368
CVE-2020-15368 involves ASRock RGB Driver’s AsrDrv103.sys, which fails to restrict user-space access. The Red Hat advisory and other sources confirm the issue can be triggered via a crafted request to CR3, enabling kernel-level code execution (e.g., triple fault scenario) and potential post-explo...
Moderate: Red Hat Security Advisory: dpdk security, bug fix, and enhancement update
An update for dpdk is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...