4 matches found
SUSE CVE-2024-58083
In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvmgetvcpu Explicitly verify the target vCPU is fully online prior to clamping the index in kvmgetvcpu. If the index is "bad", the nospec clamping will generate '0', i.e. KVM will...
5.5CVSS6.7AI score0.0022EPSS
SaveExploits0References19
CVE-2017-10923
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-225. Mitigation On systems where the guest kernel is controlled by the host rather than guest administrator, running only kernels...
7.7CVSS2.3AI score0.01804EPSS
SaveExploits0References2
20