21219 matches found
ALSA-2025:0917 Moderate: keepalived security update
The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server IPVS kernel module providing layer-4 transport layer load balancing. Keepalived implements a set of checke...
CVE-2024-49837
Memory corruption while reading CPU state data during guest VM suspend...
CVE-2024-49837
Memory corruption while reading CPU state data during guest VM suspend...
CVE-2024-38420
Memory corruption while configuring a Hypervisor based input virtual device...
CVE-2024-49837 Improper Validation of Array Index in Automotive OS Platform
Memory corruption while reading CPU state data during guest VM suspend...
CVE-2024-49837 Improper Validation of Array Index in Automotive OS Platform
Memory corruption while reading CPU state data during guest VM suspend...
CVE-2024-38420 Improper Input Validation in Hypervisor
Memory corruption while configuring a Hypervisor based input virtual device...
CVE-2024-38420 Improper Input Validation in Hypervisor
Memory corruption while configuring a Hypervisor based input virtual device...
CVE-2024-38420
CVE-2024-38420 is a memory corruption vulnerability affecting Qualcomm chipsets during configuration of a Hypervisor-based input virtual device. Connected sources confirm this is tied to a local attack surface (attack vector: LOCAL) with low privileges required and no user interaction, and they r...
Security update for qemu
This update for qemu fixes the following issues: Update to version 8.2.5: target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg and...
Qualcomm Chipsets 输入验证错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when reading CPU state data during a guest virtual machine hang...
PT-2025-2515 · Qualcomm · Hypervisor
Name of the Vulnerable Software and Affected Versions: Qualcomm affected versions not specified Description: The issue involves memory corruption that occurs while configuring a Hypervisor based input virtual device. This corruption happens during the configuration process, indicating a problem...
DEBIAN-CVE-2025-21670
In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...
PT-2025-18416
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, where a vulnerability has been resolved. The problem occurs when Virtual Functions VFs attempt to trigger a full GT reset, which they do not have...
USN-7233-2 linux-azure, linux-azure-4.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Multiple devices driver; - Network drivers; - Mellanox network drivers; - S/390 drivers; - SCSI subsystem; - Sonic...
Rockwell Automation FactoryTalk AssetCentre
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...
Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
Posted by James Forshaw, Google Project Zero Back in 2021 I wrote a blog post about various ways you can build a virtual memory access trap primitive on Windows. The goal was to cause a reader or writer of a virtual memory address to halt for a significant e.g. 1 or more seconds amount of time,...
LoongArch: Don't crash in stack_top() for tasks without vDSO
...