CVE-2022-26354

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...

CVE-2022-26354

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...

CVE-2022-26354: Missing Release of Resource after Effective Lifetime

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...

QEMU 安全漏洞

QEMU is a suite of emulation processor software from Fabrice Bellard, a French personal developer. QEMU 6.2.0 and earlier versions contain an information disclosure vulnerability that stems from the fact that invalid elements in vhost-vsock devices are not separated from the virtqueue before...

CVE-2022-26354

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Mitigation Mitigation for this issue is either not available or the currently available...

PT-2022-4825

Name of the Vulnerable Software and Affected Versions QEMU versions = 6.2.0 Description A flaw was found in the vhost-vsock device of QEMU, where an invalid element was not detached from the virtqueue before freeing its memory in case of error, leading to memory leakage and other unexpected...

GSD-2022-1000545 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by...

GSD-2022-1000459 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by...

GSD-2022-1000394 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by...

GSD-2022-1000347 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by...

GSD-2022-1000324 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.231 by...

GSD-2022-1000310 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.268 by...

GSD-2022-1000293 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.303 by...

PT-2022-28584

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.268 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.16.10 Description The issue is related to the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28621

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.4.180 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28668

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.10.101 Description The issue is related to the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been prove...

PT-2022-28733

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.15.24 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...