Search CVE reports
141 – 150 of 397 results
Some fixes available 3 of 4
Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 3 of 4
qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 3 of 4
The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 1 of 2
The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to...
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | — | — |
| qemu-kvm | — | — | — | — | — |
Some fixes available 19 of 27
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of...
171 affected packages
linux, linux-allwinner, linux-allwinner-5.19, linux-aws, linux-aws-5.0...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | Not affected | Not affected | Not affected | Not affected |
| linux-allwinner | — | Not in release | Not in release | Not in release | Not in release |
| linux-allwinner-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws | — | Not affected | Not affected | Not affected | Not affected |
| linux-aws-5.0 | — | Not in release | Not in release | Not in release | Not affected |
| linux-aws-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-aws-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-aws-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-aws-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-aws-hwe | — | Not in release | Not in release | Not in release | Not in release |
| linux-azure | — | Not affected | Not affected | Not affected | Not affected |
| linux-azure-4.15 | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-azure-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-edge | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-fde | — | Not affected | Not affected | Not affected | Not in release |
| linux-azure-fde-5.15 | — | Not in release | Not in release | Ignored | Not in release |
| linux-azure-fde-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-fde-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-azure-nvidia | — | Not affected | Not in release | Not in release | Not in release |
| linux-bluefield | — | Not in release | Not in release | Not affected | Not in release |
| linux-dell300x | — | Not in release | Not in release | Not in release | Not affected |
| linux-euclid | — | Not in release | Not in release | Not in release | Not in release |
| linux-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-flo | — | Not in release | Not in release | Not in release | Not in release |
| linux-gcp | — | Not affected | Not affected | Not affected | Not affected |
| linux-gcp-4.15 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-gcp-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-gcp-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-edge | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-gke | — | Not affected | Not affected | Not affected | Not in release |
| linux-gke-4.15 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gke-5.0 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gke-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gke-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gke-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gkeop | — | Not affected | Not affected | Not affected | Not in release |
| linux-gkeop-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gkeop-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-goldfish | — | Not in release | Not in release | Not in release | Not in release |
| linux-grouper | — | Not in release | Not in release | Not in release | Not in release |
| linux-hwe | — | Not in release | Not in release | Not in release | Not affected |
| linux-hwe-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-hwe-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-hwe-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-hwe-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-edge | — | Not in release | Not in release | Not in release | Not affected |
| linux-ibm | — | Not affected | Not affected | Not affected | Not in release |
| linux-ibm-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-ibm-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-ibm-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-intel | — | Not affected | Not in release | Not in release | Not in release |
| linux-intel-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-intel-iot-realtime | — | Not in release | Not affected | Not in release | Not in release |
| linux-intel-iotg | — | Not in release | Not affected | Not in release | Not in release |
| linux-intel-iotg-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-iot | — | Not in release | Not in release | Not affected | Not in release |
| linux-kvm | — | Not in release | Not affected | Not affected | Not affected |
| linux-laptop | — | Not in release | Not in release | Not in release | Not in release |
| linux-lowlatency | — | Not affected | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-lowlatency-hwe-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-lowlatency-hwe-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lts-quantal | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-raring | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-saucy | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-trusty | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-utopic | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-vivid | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-wily | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-xenial | — | Not in release | Not in release | Not in release | Not in release |
| linux-maguro | — | Not in release | Not in release | Not in release | Not in release |
| linux-mako | — | Not in release | Not in release | Not in release | Not in release |
| linux-manta | — | Not in release | Not in release | Not in release | Not in release |
| linux-nvidia | — | Not affected | Not affected | Not in release | Not in release |
| linux-nvidia-6.11 | — | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-lowlatency | — | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-tegra | — | Not affected | Not affected | Not in release | Not in release |
| linux-nvidia-tegra-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-nvidia-tegra-igx | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem | — | Not in release | Not in release | Not in release | Not affected |
| linux-oem-5.10 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-5.14 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-5.17 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-5.6 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-6.0 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-6.1 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-6.11 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-6.8 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oem-osp1 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle | — | Not affected | Not affected | Not affected | Not affected |
| linux-oracle-5.0 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oracle-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oracle-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-raspi | — | Not affected | Not affected | Not affected | Not in release |
| linux-raspi-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-raspi-realtime | — | Not affected | Not in release | Not in release | Not in release |
| linux-raspi2 | — | Not in release | Not in release | Not affected | Not affected |
| linux-raspi2-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-realtime | — | Not affected | Not affected | Not in release | Not in release |
| linux-realtime-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-realtime-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-riscv | — | Not affected | Not affected | Not affected | Not in release |
| linux-riscv-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-riscv-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-riscv-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-riscv-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-snapdragon | — | Not in release | Not in release | Not in release | Not affected |
| linux-starfive | — | Not in release | Not in release | Not in release | Not in release |
| linux-starfive-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-starfive-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-starfive-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-xilinx-zynqmp | — | Not in release | Not affected | Not affected | Not in release |
| qemu | — | Not affected | Not affected | Not affected | Not affected |
| qemu-kvm | — | Not in release | Not in release | Not in release | Not in release |
| xen | — | Not affected | Not affected | Not affected | Not affected |
Some fixes available 3 of 4
QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors...
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 3 of 4
QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 3 of 4
Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 3 of 4
Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 3 of 4
QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability...
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Not affected | Not affected |
| qemu-kvm | — | — | — | Not in release | Not in release |