CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

CVE-2021-3546

CVE-2021-3546 affects QEMU’s virtio vhost-user GPU (vhost-user-gpu) in versions up to 6.0. The flaw is an out-of-bounds write during processing of VIRTIO_GPU_CMD_GET_CAPSET, potentially allowing a privileged guest to crash the host QEMU process (DoS) or execute code with QEMU privileges. Public a...

CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

CVE-2021-3545

CVE-2021-3545 affects QEMU’s virtio vhost-user GPU device (vhost-user-gpu) up to version 6.0. The flaw is in virgl_cmd_get_capset_info() within contrib/vhost-user-gpu/virgl.c and arises from reading uninitialized memory, allowing a malicious guest to leak host memory. Connected sources confirm th...

CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

CVE-2021-3544

CVE-2021-3544 concerns memory leaks in QEMU’s virtio vhost-user-gpu (vhost-user-gpu.c and virgl.c) due to improper memory release after the effective lifetime, affecting versions up to and including 6.0. The issue, identified across multiple advisories, is a memory leak in the vhost-user-gpu comp...

PT-2021-28290

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: virtio gpu disable scanout, virtio gpu set scanout, and...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-vga: Crash in virtio_gpu_disable_scanout

Detailed Report: https://oss-fuzz.com/testcase?key=5577696527646720 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-vga Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x633068d19874 Crash State:...

UVI-2021-1000350 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000350 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

PT-2021-28643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description A memory leak issue was discovered in the virtio fs probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-28705

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.12.3 Description The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.12.4. The actual impact and...

PT-2021-28815

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.10.36 Description The issue concerns the vsock/virtio component, where queued packets are not properly freed when a socket is closed. This problem was introduced in version v5.2 and is fixed in version...