3 matches found
CVE-2015-3215
The CVE-2015-3215 issue affects the NetKVM Windows Virtio driver (virtio-win). The root cause is a crafted IP packet length value that does not account for IP options, allowing remote attackers to cause a denial of service (guest crash). Affected component/file: NetKVM/virtio-win traffic handling...
CVE-2026-5164
The CVE-2026-5164 entry describes a vulnerability in virtio-win where the RhelDoUnMap() function fails to properly validate the number of descriptors in an unmap request. This input validation flaw can be exploited by a local user who supplies an excessive number of descriptors, potentially causi...
CVE-2026-5165
CVE-2026-5165 affects virtio-win’s VirtIO Block (BLK) device. A reset can mishandle memory, causing a use-after-free that could allow a local attacker to corrupt memory and cause system instability or unexpected behavior. Connected sources corroborate the issue across NVD, Red Hat and other feeds...