Lucene search
K

12 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: virtio – Fixed a race condition related to dataavail and actual data. The virtio rng device initiates a new entropy request whenever the data available amount reaches zero. When a new request occurs at the end of a read...

5.8AI score0.00046EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.3 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013171 advisory. In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entro...

5.8AI score0.00046EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/12/25 1:59 p.m.2 views

CVE-2023-53998

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation, that is, when the...

5.5CVSS5.7AI score0.00046EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:58 a.m.0 views

SUSE CVE-2023-53998

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation, that is, when the...

5.5CVSS6.4AI score0.00046EPSS
Exploits0References21
Tenable Nessus
Tenable Nessus
added 2025/12/25 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-53998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new...

6.1AI score0.00046EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2025/12/24 11:15 a.m.1 views

CVE-2023-53998

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation, that is, when the...

5.9AI score0.00046EPSS
Exploits0References9
OSV
OSV
added 2025/12/24 10:55 a.m.2 views

CVE-2023-53998 hwrng: virtio - Fix race on data_avail and actual data

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation, that is, when the...

6.2AI score0.00046EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.1 views

PT-2025-52955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the virtio random number generator rng device when handling entropy requests and data availability. Specifically, the issue occurs when a new request is...

6.3AI score0.00046EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.3 views

SUSE CVE-2013-2016

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

7.8CVSS6.6AI score0.00074EPSS
Exploits1References5
Prion
Prion
added 2019/12/30 10:15 p.m.14 views

Design/Logic Flaw

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

6.9CVSS6.8AI score0.00074EPSS
Exploits1References9Affected Software4
CVE
CVE
added 2019/12/30 9:47 p.m.121 views

CVE-2013-2016

CVE-2013-2016 affects qemu v1.3.0 and later (virtio-rng). The issue arises from how addresses are validated when a guest accesses the config space of a virtio device; when the device has a very small or zero-sized config space, a privileged guest could access the host’s qemu address space and pot...

7.8CVSS7.5AI score0.00074EPSS
Exploits1References9Affected Software1
Oracle linux
Oracle linux
added 2018/11/05 12:0 a.m.503 views

ovmf security, bug fix, and enhancement update

20180508-3.gitee3198e672e2.el7 - ovmf-redhat-provide-virtual-bundled-OpenSSL-in-OVMF.patch bz1607792 - Resolves: bz1607792 add 'Provides: bundledopenssl = 1.1.0h' to the spec file 20180508-2.gitee3198e672e2 - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally bz1577546 - build OVMF...

6.5CVSS1.6AI score0.14445EPSS
Exploits0
Rows per page
Query Builder