Количество 13
Количество 13

CVE-2024-31146
When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines.

CVE-2024-31146
When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines.
CVE-2024-31146
When multiple devices share resources and one of them is to be passed ...
GHSA-hrw6-9556-27w2
When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines.

BDU:2024-07434
Уязвимость компонента PCI Device Handler кроссплатформенного гипервизора Xen, позволяющая нарушителю оказывать влияние на конфиденциальность, целостность и доступность системы

SUSE-SU-2024:3113-1
Security update for xen

SUSE-SU-2024:3075-1
Security update for xen

SUSE-SU-2024:3010-1
Security update for xen

SUSE-SU-2024:3001-1
Security update for xen

SUSE-SU-2024:2994-1
Security update for xen

ROS-20240917-07
Множественные уязвимости xen

SUSE-SU-2024:3586-1
Security update for xen

SUSE-SU-2024:3423-1
Security update for xen
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2024-31146 When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines. | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
![]() | CVE-2024-31146 When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines. | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
CVE-2024-31146 When multiple devices share resources and one of them is to be passed ... | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад | |
GHSA-hrw6-9556-27w2 When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines. | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад | |
![]() | BDU:2024-07434 Уязвимость компонента PCI Device Handler кроссплатформенного гипервизора Xen, позволяющая нарушителю оказывать влияние на конфиденциальность, целостность и доступность системы | CVSS3: 5.5 | 0% Низкий | 11 месяцев назад |
![]() | SUSE-SU-2024:3113-1 Security update for xen | 10 месяцев назад | ||
![]() | SUSE-SU-2024:3075-1 Security update for xen | 10 месяцев назад | ||
![]() | SUSE-SU-2024:3010-1 Security update for xen | 10 месяцев назад | ||
![]() | SUSE-SU-2024:3001-1 Security update for xen | 10 месяцев назад | ||
![]() | SUSE-SU-2024:2994-1 Security update for xen | 10 месяцев назад | ||
![]() | ROS-20240917-07 Множественные уязвимости xen | CVSS3: 7.5 | 9 месяцев назад | |
![]() | SUSE-SU-2024:3586-1 Security update for xen | 9 месяцев назад | ||
![]() | SUSE-SU-2024:3423-1 Security update for xen | 9 месяцев назад |
Уязвимостей на страницу