198 matches found
CVE-2024-26598: Use After Free
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command...
PT-2024-1990
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use-after-free UAF scenario in the Linux kernel's KVM: arm64: vgic-its module. This occurs when an LPI translation cache hit races with an operation...
GSD-2022-1007477 KVM: arm64: vgic: Fix exit condition in scan_its_table()
KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...
GSD-2022-1007204 KVM: arm64: vgic: Fix exit condition in scan_its_table()
KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1006991 KVM: arm64: vgic: Fix exit condition in scan_its_table()
KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.76 by commit...
GSD-2022-1006699 KVM: arm64: vgic: Fix exit condition in scan_its_table()
KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
PT-2022-34954 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...
PT-2022-35818 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.298 Description: The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...
PT-2022-35732 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...
PT-2022-35459
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.152 Description The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven. Recommendation...
PT-2022-35617
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.221 Description The issue is related to the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...
Xen 'xen/arch/arm/vgic.c' Denial of Service Vulnerability
Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A denial-of-service vulnerability exists in Xen 'xen/arch/arm/vgic.c', which allows an attacker to exploit the vulnerability by submitting a special request to crash the system...
FreeBSD : xen-kernel -- arm: vgic-v2: GICD_SGIR is not properly emulated (785c86b1-27d6-11e5-a4a5-002590263bf5)
The Xen Project reports : When decoding a guest write to a specific register in the virtual interrupt controller Xen would treat an invalid value as a critical error and crash the host. By writing an invalid value to the GICD.SGIR register a guest can crash the host, resulting in a Denial of...
FreeBSD : xen-kernel -- arm: vgic: incorrect rate limiting of guest triggered logging (912cb7f7-27df-11e5-a4a5-002590263bf5)
The Xen Project reports : On ARM systems the code which deals with virtualizing the GIC distributor would, under various circumstances, log messages on a guest accessible code path without appropriate rate limiting. A malicious guest could cause repeated logging to the hypervisor console, leading...
Fedora 21 : xen-4.4.1-16.fc21 (2015-3944)
Additional patch for XSA-98 on arm64 HVM qemu unexpectedly enabling emulated VGA graphics backends XSA-119, CVE-2015-2152 Hypervisor memory corruption due to x86 emulator flaw XSA-123, CVE-2015-2151 enable building pngs from fig files which is working again, fix oxenstored.service preset...
PT-2015-4554
Name of the Vulnerable Software and Affected Versions Xen versions 4.5.x Description The issue allows local guest users to cause a denial of service, resulting in a host crash, by writing an invalid value to the GICD.SGIR register. This occurs when the vgic v2 to sgi function in arch/arm/vgic-v2....
xen-kernel -- arm: vgic-v2: GICD_SGIR is not properly emulated
The Xen Project reports: When decoding a guest write to a specific register in the virtual interrupt controller Xen would treat an invalid value as a critical error and crash the host. By writing an invalid value to the GICD.SGIR register a guest can crash the host, resulting in a Denial of Servi...
PT-2014-5003
Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x Description The issue is related to the vgic distr mmio write function in the virtual guest interrupt controller GIC distributor. It allows local guest users to cause a denial of service, resulting in a NULL pointer...