Null pointer dereference

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

Design/Logic Flaw

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36147

An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtionet.c virtionetpingrxq NULL pointer dereference for vq-used...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36143

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

CVE-2021-36143

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

CVE-2021-36143

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36144

CVE-2021-36144 affects the ACRN hypervisor prior to 2.5. The issue is described as a use-after-free involving a freed virtio device in the polling timer handler, within devicemodel/hw/pci/virtio/*.c. The connected sources confirm this root cause and timeline, but do not provide exploitation detai...

ACRN 资源管理错误漏洞

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...

PT-2021-21134

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: The issue is related to a use-after-free condition in the polling timer handler for a freed virtio device, specifically in the devicemodel/hw/pci/virtio/.c files. Recommendations: For versions prior to...

CVE-2021-36143: NULL Pointer Dereference

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

CVE-2021-36144: Use After Free

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

ACRN 代码问题漏洞

ACRN is an open source project released by the Linux Foundation, a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in virtionetpingrxq in devicemodel/hw/pci/virtio/virtionet.c in versions prior to ACRN 2.5. No details of the vulnerability are...

ACRN 代码问题漏洞

ACRN is an open source virtual machine monitor for the Internet of Things. A null pointer dereference vulnerability exists in vqendchains in hw/pci/virtio/virtio.c in ACRN versions prior to 2.5. No detailed vulnerability details are provided at this time...

PT-2021-21137

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: An issue in the devicemodel/hw/pci/virtio/virtio net.c file allows a NULL pointer dereference for vq-used in the virtio net ping rxq function. Recommendations: For versions prior to 2.5, update to versi...

The vulnerability of the `virtio_gpu_set_scanout` function in the `hw/display/virtio-gpu.c` component of the QEMU hardware emulation software occurs due to a lack of memory release mechanism before deleting the last reference. This allows a malicious actor to trigger a service failure.

The vulnerability of the virtiogpusetscanout function in the hw/display/virtio-gpu.c component of the QEMU hardware emulation software is related to a lack of a mechanism for freeing memory before deleting the last pointer. Exploiting this vulnerability allows an attacker to trigger a service...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Stack-use-after-return in __readlink

Detailed Report: https://oss-fuzz.com/testcase?key=5970432137232384 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash Address: 0x7f0e7ef1c2a8 Crash...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Heap-buffer-overflow in synth_name_to_path

Detailed Report: https://oss-fuzz.com/testcase?key=4668575699828736 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x609000287ae0 Crash...