14638 matches found
CVE-2025-46708
A security vulnerability exists in the Imagination GPU Driver where software running inside a Guest VM can perform improper GPU system calls. This allows a malicious guest to prevent other guests from processing work on the GPU, potentially causing a Denial of Service for other virtualized worklo...
[SECURITY] Fedora 42 Update: libtpms-0.10.1-1.fc42
A library providing TPM functionality for VMs. Targeted for integration into Qemu...
qCUDA input validation error vulnerability
qCUDA is a virtualization software by the individual developer of coldfunction. An input validation error vulnerability exists in qCUDA that stems from the qcowmakeempty function mishandling the parameter s-l1size, which could lead to an integer overflow...
PT-2025-30134
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the KVM component related to handling hypercalls HVCALL FLUSH VIRTUAL ADDRESS LIST and HVCALL FLUSH VIRTUAL ADDRESS LIST EX within KVM guests utilizin...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the ioapicwriteindirect function in the arch/x86/kvm/ioapic.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servic...
Linux PowerPC KVM _GLOBAL_TOC Heap Buffer Overflow DoS
The vulnerability of the GLOBALTOC function in the arch/powerpc/kvm/book3shvrmhandlers.S module of the virtualization subsystem on the PowerPC platform in the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute...
microcode_ctl: From CVEorg collector
A flaw was found in the Branch Prediction Unit BPU of Intel's Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier IBPB protections. By employing branch predictor training techniques as described in the "Training Solo" publication, an attacker with loca...
Advisory ROSA-SA-2025-2897
Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-14.0.1.rv3 CVE-ID: CVE-2019-1547 BDU-ID: 2019-04084 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the ecerr.c and eclib.c functions of the OpenSSL library is related to the lack of data encryption measures...
Design High-Confidence Computers Using Trusted Instructional Set Architecture and Emulators
High-confidence computing relies on trusted instructional set architecture, sealed kernels, and secure operating systems. Cloud computing depends on trusted systems for virtualization tasks. Branch predictions and pipelines are essential in improving performance of a CPU/GPU. But Spectre and...
Linux x86 Kernel Trace KVM Nested Venter Buffer Overflow DoS
The vulnerability of the tracekvmnestedvmenterfailed function in the arch/x86/kvm/trace.h module of the virtualization subsystem on the Linux x86 kernel platform is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability may allow an attacker to...
Linux arch/riscv/kvm/vcpu_sbi.c Heap Buffer Overflow DoS
The vulnerability of the kvmriscvvcpusbiinit function in the arch/riscv/kvm/vcpusbi.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the kvmvgicvcpuDestroy function in the kernel of the Linux operating system’s arch/arm64/kvm/vgic/vgic-init.c module is related to the re-use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
KVM Heap Buffer Overflow DoS
The vulnerability of the kvmvmioctlunregistercoalescedmmio function in the virt/kvm/coalescedmmio.c module of the Linux Kernel-Based Virtual Machine KVM virtualization subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
Linux x86 Kernel Heap Buffer Overflow DoS
The vulnerability of the emulatorgethflags function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the Linux x86 kernel platform is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and...
Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (June 2025)
Summary Multiple vulnerabilities have been addressed in IBM Data Virtualization on Cloud Pak for Data. Note that IBM Data Virtualization was named Watson Query in IBM Cloud Pak for Data version 4.6, 4.7, and 4.8. Vulnerability Details CVEID:CVE-2024-8184 DESCRIPTION: There exists a security...
Linux Kernel arch/x86/kvm/x86.c Heap Buffer Overflow DoS
The vulnerability of the kvmarchvcpuioctl function in the arch/x86/kvm/x86.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...
GodFather Android Malware Runs Real Apps in a Sandbox to Steal Data
Zimperium zLabs reveals GodFather malware’s advanced virtualization that hijacks mobile banking and crypto apps. Learn how it steals data on your phone...
CVE-2022-50227
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Initialize Xen timer only once Add a check for existing xen timers before initializing a new one. Currently kvmxeninittimer is called on every KVMXENVCPUATTRTYPETIMER, which is causing the following ODEBUG crash whe...
UBUNTU-CVE-2022-50226
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioctl interfaces, input may be passed that is less than or equal to SEVFWBLOBMAXSIZE, but larger than the data that PSP firmware return...
UBUNTU-CVE-2022-50224
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled mindblowing and trigger the WARN that fires on reserved SPTE bits...