Поиск уязвимостей
Количество 37
Количество 37
BDU:2025-12069
Уязвимость компонента avic.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260202-80-0060
Уязвимость kernel-lt
ROS-20260202-73-0057
Уязвимость kernel-lt
CVE-2025-37885
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
CVE-2025-37885
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
CVE-2025-37885
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
CVE-2025-37885
KVM: x86: Reset IRTE to host control if *new* route isn't postable
CVE-2025-37885
In the Linux kernel, the following vulnerability has been resolved: K ...
GHSA-jrv2-7qh6-cgcr
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
ALT-PU-2025-16454
ALT-PU-2025-16454: package `kernel-image-pine` update to version 6.12.28-alt2
ALT-PU-2025-16507
ALT-PU-2025-16507: package `kernel-image-6.12` update to version 6.12.27-alt1
ALT-PU-2025-16463
ALT-PU-2025-16463: package `kernel-image-rt` update to version 6.12.27-alt1
ALT-PU-2025-6606
ALT-PU-2025-6606: package `kernel-image-rt` update to version 5.10.237-alt1.rt131
ALT-PU-2025-6382
ALT-PU-2025-6382: package `kernel-image-std-def` update to version 5.10.237-alt1
ALT-PU-2025-7195
ALT-PU-2025-7195: package `kernel-image-un-def` update to version 6.1.140-alt1
SUSE-SU-2025:02846-1
Security update for the Linux Kernel
SUSE-SU-2025:03272-1
Security update for the Linux Kernel
SUSE-SU-2025:03301-1
Security update for the Linux Kernel
SUSE-SU-2025:03382-1
Security update for the Linux Kernel
SUSE-SU-2025:03290-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2025-12069 Уязвимость компонента avic.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | больше 1 года назад | |
ROS-20260202-80-0060 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 9 месяцев назад | |
ROS-20260202-73-0057 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 9 месяцев назад | |
CVE-2025-37885 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад | |
CVE-2025-37885 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed. | CVSS3: 6.7 | 0% Низкий | больше 1 года назад | |
CVE-2025-37885 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад | |
CVE-2025-37885 KVM: x86: Reset IRTE to host control if *new* route isn't postable | CVSS3: 5.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-37885 In the Linux kernel, the following vulnerability has been resolved: K ... | CVSS3: 7.8 | 0% Низкий | больше 1 года назад | |
GHSA-jrv2-7qh6-cgcr In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад | |
ALT-PU-2025-16454 ALT-PU-2025-16454: package `kernel-image-pine` update to version 6.12.28-alt2 | CVSS3: 8.8 | больше 1 года назад | ||
ALT-PU-2025-16507 ALT-PU-2025-16507: package `kernel-image-6.12` update to version 6.12.27-alt1 | CVSS3: 7.8 | больше 1 года назад | ||
ALT-PU-2025-16463 ALT-PU-2025-16463: package `kernel-image-rt` update to version 6.12.27-alt1 | CVSS3: 7.8 | больше 1 года назад | ||
ALT-PU-2025-6606 ALT-PU-2025-6606: package `kernel-image-rt` update to version 5.10.237-alt1.rt131 | CVSS3: 7.8 | больше 1 года назад | ||
ALT-PU-2025-6382 ALT-PU-2025-6382: package `kernel-image-std-def` update to version 5.10.237-alt1 | CVSS3: 7.8 | больше 1 года назад | ||
ALT-PU-2025-7195 ALT-PU-2025-7195: package `kernel-image-un-def` update to version 6.1.140-alt1 | CVSS3: 9.8 | больше 1 года назад | ||
SUSE-SU-2025:02846-1 Security update for the Linux Kernel | около 1 года назад | |||
SUSE-SU-2025:03272-1 Security update for the Linux Kernel | около 1 года назад | |||
SUSE-SU-2025:03301-1 Security update for the Linux Kernel | около 1 года назад | |||
SUSE-SU-2025:03382-1 Security update for the Linux Kernel | около 1 года назад | |||
SUSE-SU-2025:03290-1 Security update for the Linux Kernel | около 1 года назад |
Уязвимостей на страницу