21227 matches found
The vulnerability of NVIDIA Virtual GPU driver, related to insufficient input data validation, allows attackers to escalate their privileges, execute arbitrary code, or cause service failures.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, or cause service failures...
Citrix Virtual Apps and Desktops Session Recording Multiple Vulnerabilities (CTX691941)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2407 hotfix 24.5.200.8, 1912 LTSR prior to CU9 hotfix 19.12.9100.6, 2203 LTSR prior to CU5 hotfix 22.03.5100.11, or 2402 LTSR prior to CU1 hotfix 24.02.1200.16. It is, therefore, affected by multiple...
The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to gain unauthorized access to protected information and increase their privileges.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...
CVE-2024-43625
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability...
CVE-2024-43624
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...
CVE-2024-43624
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...
CVE-2024-38264
Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...
CVE-2024-38264
Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...
CVE-2024-43624 Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
...
CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
...
New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration
Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution RCE The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators...
Moderate: Red Hat Security Advisory: edk2 security update
An update for edk2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
kernel: drm/fbdev-dma: Only set smem_start is enable per module option
In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smemstart is enable per module option Only export struct fbinfo.fix.smemstart if that is required by the user and the memory does not come from vmalloc. Setting struct fbinfo.fix.smemstart breaks systems...
kernel: powerpc/kasan: Fix addr error caused by page alignment
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix addr error caused by page alignment In kasaninitregion, when kstart is not page aligned, at the begin of for loop, kcur = kstart & PAGEMASK is less than kstart, and then va = block + kcur - kstart is less than...
kernel: net: veth: clear GRO when clearing XDP even when down
In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down The Linux kernel CVE team has assigned CVE-2024-26803 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26803-9985@gregkh/T...
kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown
A vulnerability was found in the Linux kernel's KVM for ARM64 within the vgic-init.c, vgic-mmio-v3.c, and vgic.h files. The virtual vCPUs may retain dangling pointers in a redistributor region after they have been torn down, leading to potential memory corruption...
kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()
A vulnerability was found in the eventdeliver function in the Linux kernel's VMCI component, where the issue involves a lack of sanitization for the eventdata.event index controlled by user-space, which could lead to speculative information leaks...
kernel: drm/radeon: check bo_va->bo is non-NULL before using it
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check bova-bo is non-NULL before using it The call to radeonvmclearfreed might clear bova-bo, so we have to check it before dereferencing it...
kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed
In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async PF workqueue when vCPU is being destroyed Always flush the per-vCPU async PF workqueue when a vCPU is clearing its completion queue, e.g. when a VM and all its vCPUs is being destroyed. KVM must ensure tha...
kernel: vt_ioctl: fix array_index_nospec in vt_setactivate
A vulnerability was found in the Linux kernel's vtioctl subsystem, where the vtsetactivate function can lead to a transient integer underflow due to improper handling of the vsa.console value. The vulnerability arises when an out-of-bounds value is decreased before being sanitized using...