CVE-2021-4095

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVMXENHVMSETATTR ioctl...

PT-2024-11386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a stack-out-of-bounds memory access from the ioapic write indirect function in the KVM x86 module. KASAN reports a stack-out-of-bounds error in kvm make vcpus...

PT-2021-7295 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15 rc7 Description: The issue is related to incomplete cleanup of temporary or auxiliary resources in the arch/x86/kvm/lapic.c component of the Kernel-based Virtual Machine KVM subsystem in the Linux kernel...

UVI-2021-1001312 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...

UVI-2021-1001244 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

PT-2021-29709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function when handling vcpu load. The actual impact and attack plausibility have not yet been proven. This issue...

PT-2021-29833

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and attack plausibility of this issue have not...

PT-2021-25714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-29777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2021-25838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and potential for attack have not been fully determined...

PT-2021-25633

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.13.5 Description: A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-25782

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. This problem was introduced in version v4.18 and is fixed in Linux Kernel version...

PT-2021-29628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.13.5 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl vcpu load function. The actual impact and attack plausibility have not yet been proven. This issue was introduced ...

PT-2024-11297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a leak in kvm arch vcpu ioctl vcpu load due to vcpu put not being called if the user copy fails. This can result in preempt notifier corruption and crashes, among...

GSD-2021-1000012 KVM: VMX: Don't use vcpu->run->internal.ndata as an array index

KVM: VMX: Don't use vcpu-run-internal.ndata as an array index This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

UVI-2021-1000012 KVM: VMX: Don't use vcpu->run->internal.ndata as an array index

KVM: VMX: Don't use vcpu-run-internal.ndata as an array index This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

UVI-2021-1000022 KVM: VMX: Don't use vcpu->run->internal.ndata as an array index

KVM: VMX: Don't use vcpu-run-internal.ndata as an array index This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

SUSE: Security Advisory (SUSE-SU-2018:0007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2020-29570

An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels c...

CVE-2020-29570

An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels c...