CVE-2022-26353

CVE-2022-26353 affects QEMU’s virtio-net device. Root cause: after CVE-2021-3748 fix, cached virtqueue elements aren’t unmapped on error, causing memory leakage. Affected versions include QEMU 6.2.0 and older builds (e.g., packages listed as

CVE-2022-26353

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0...

CVE-2022-26353: Missing Release of Resource after Effective Lifetime

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0...

QEMU 安全漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A security vulnerability exists in QEMU version 6.2.0, which stems from a previous fix for CVE-2021-3748 in the QEMU virtio-net appliance, that...

Linux Kernel VirtIO Bluetooth driver denial of service vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A denial of service vulnerability exists in the Linux Kernel VirtIO Bluetooth driver, which is caused by a memory leak in the VirtIO Bluetooth driver memory leak in driver/Bluetooth/VirtIObt.c. A local...

CVE-2022-26353

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage, use-after-free or other unexpected results. A malicious privileged guest could exploit...

CVE-2022-26878

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

AZL-9066 CVE-2022-26878 affecting package kernel for versions less than 5.15.32.1-2

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

DEBIAN-CVE-2022-26878

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

UBUNTU-CVE-2022-26878

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

Linux kernel安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A denial of service vulnerability exists in the Linux Kernel VirtIO Bluetooth driver, which is caused by a memory leak in the VirtIO Bluetooth driver memory leak in driver/Bluetooth/VirtIObt.c. A local...

USN-5307-1 qemu vulnerabilities

Gaoning Pan discovered that QEMU incorrectly handled the floppy disk emulator. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2021-20196 Gaoning Pan discovered that the QEMU vmxnet3 NIC emulator incorrectly handled certain values. A...

The vulnerability in the implementation of the virtio_net_receive_rcu function (hw/net/virtio-net.c) of the QEMU hardware emulation software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the virtionetreceivercu function implementation in the QEMU hardware emulation software hw/net/virtio-net.c is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execute arbitrary code or cause system failures...

AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2021:0711)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:0711 advisory. QEMU: virtiofsd: potential privileged host device access from guest CVE-2020-35517 Tenable has extracted the preceding description block directly from the AlmaLinu...

virtio-win bug fix and enhancement update

An update is available for virtio-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...

Mageia: Security Advisory (MGASA-2017-0242)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0258)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certa...

Mageia: Security Advisory (MGASA-2017-0259)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...