485 matches found
CVE-2022-1263
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service...
Null pointer dereference
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service...
CVE-2022-1263
CVE-2022-1263 is a Linux kernel KVM NULL pointer dereference bug that triggers when releasing a vCPU with dirty ring support enabled. An unprivileged local attacker on the host can issue specific ioctl calls to cause a kernel oops and DoS. Public advisories (e.g., Amazon Linux 2 ALAS2KERNEL-5.15-...
Price Reduction - Azure Spring Apps does more, costs less!
We believe in providing the most innovative cloud offerings at incredibly competitive prices. As we operate Azure Spring Apps, we continue to build efficiencies and economies of scale. We are passing those efficiencies to you. Many customers have asked us to lower the size of the base unit to mak...
PT-2022-1376
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.17 Description An issue in the x86 KVM subsystem of the Linux kernel allows unprivileged guest users to compromise the guest kernel due to mishandled TLB flush operations in certain KVM VCPU PREEMPTED...
GSD-2022-1002315 xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
xen: delay xenhvminittimeops if kdump is boot on vcpu=32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...
GSD-2022-1002191 xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
xen: delay xenhvminittimeops if kdump is boot on vcpu=32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...
GSD-2022-1001991 xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
xen: delay xenhvminittimeops if kdump is boot on vcpu=32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...
GSD-2022-1001701 xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
xen: delay xenhvminittimeops if kdump is boot on vcpu=32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...
PT-2022-29305
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.3 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30588
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.19.238 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30264
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.111 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30464
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-29974
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.34 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.
...
CVE-2021-4032
A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...
Session fixation
A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...
UBUNTU-CVE-2021-4032
A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...
CVE-2021-4032
A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...
Linux kernel 安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux, of which KVM is a kernel-based virtual machine. Linux kernel suffers from a denial-of-service vulnerability, which stems from the possibility that the KVM subsystem may mishandle a memory error that...