kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown

A vulnerability was found in the Linux kernel's KVM for ARM64 within the vgic-init.c, vgic-mmio-v3.c, and vgic.h files. The virtual vCPUs may retain dangling pointers in a redistributor region after they have been torn down, leading to potential memory corruption...

kernel: vt_ioctl: fix array_index_nospec in vt_setactivate

A vulnerability was found in the Linux kernel's vtioctl subsystem, where the vtsetactivate function can lead to a transient integer underflow due to improper handling of the vsa.console value. The vulnerability arises when an out-of-bounds value is decreased before being sanitized using...

kernel: net: veth: clear GRO when clearing XDP even when down

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down The Linux kernel CVE team has assigned CVE-2024-26803 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26803-9985@gregkh/T...

kernel: powerpc/kasan: Fix addr error caused by page alignment

In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix addr error caused by page alignment In kasaninitregion, when kstart is not page aligned, at the begin of for loop, kcur = kstart & PAGEMASK is less than kstart, and then va = block + kcur - kstart is less than...

kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()

A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...

kernel: drm/radeon: check bo_va->bo is non-NULL before using it

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check bova-bo is non-NULL before using it The call to radeonvmclearfreed might clear bova-bo, so we have to check it before dereferencing it...

kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed

A flaw was found in the KVM Kernel-based Virtual Machine subsystem in the Linux kernel. When virtual processors or virtual machines are destroyed, pending asynchronous page fault background tasks are not properly completed before resources are released. A local user with permissions to manage...

kernel: drm/fbdev-dma: Only set smem_start is enable per module option

In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smemstart is enable per module option Only export struct fbinfo.fix.smemstart if that is required by the user and the memory does not come from vmalloc. Setting struct fbinfo.fix.smemstart breaks systems...

kernel: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses

A slab-out-of-bounds read vulnerability was found in the Linux kernel's PowerPC IOMMU code. The failiommusetup function registers the same notifierblock structure to both PCI and VIO buses. Since notifierblock is a linked list node, this causes notifiers registered to one bus type to also apply t...

November 12, 2024—KB5046612 (OS Build 14393.7515)

None None...

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

...

uprobes: fix kernel info leak via "[uprobes]" vma

...

vrf: revert "vrf: Remove unnecessary RCU-bh critical section"

...

PT-2024-34708 · Unknown +1 · Hda Audio Driver +1

Name of the Vulnerable Software and Affected Versions: hda audio driver affected versions not specified Description: A guest can trigger an infinite loop in the hda audio driver. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...

Citrix Systems Virtual Apps and Desktops 安全漏洞

Citrix Systems Virtual Apps and Desktops is virtual software from Citrix Systems, Inc. that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Systems Virtual Apps and Desktops that stems from the ability to access privileges and...

PT-2024-8079

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory, which can lead to a denial-of-service...

ALSA-2024:9088 Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC CVE-2023-6129 openssl: Excessive time spent...

PT-2024-8515

Name of the Vulnerable Software and Affected Versions Citrix Virtual Apps and Desktops CVAD versions 1912 LTSR, 2203, 2402, and 2407 Description The issue is related to insecure privilege management in the Session Recording component of Citrix Virtual Apps and Desktops CVAD, allowing an attacker ...

Microsoft Manage Virtual Hard Disks 安全漏洞

Microsoft Manage Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Manage Virtual Hard Disks. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and editions are...