Поиск уязвимостей
Количество 27
Количество 27
CVE-2025-38074
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue.
CVE-2025-38074
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue.
CVE-2025-38074
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue.
CVE-2025-38074
vhost-scsi: protect vq->log_used with vq->mutex
CVE-2025-38074
In the Linux kernel, the following vulnerability has been resolved: v ...
GHSA-7p5h-9pp6-5wqc
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue.
BDU:2025-14971
Уязвимость компонента scsi.c операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260205-80-0042
Уязвимость kernel-lt
ROS-20260205-73-0031
Уязвимость kernel-lt
ALT-PU-2025-16597
ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1
SUSE-SU-2025:02846-1
Security update for the Linux Kernel
ALT-PU-2025-16618
ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134
SUSE-SU-2025:03023-1
Security update for the Linux Kernel
SUSE-SU-2025:02996-1
Security update for the Linux Kernel
SUSE-SU-2025:02969-1
Security update for the Linux Kernel
ALT-PU-2025-16605
ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1
SUSE-SU-2025:02853-1
Security update for the Linux Kernel
SUSE-SU-2025:02997-1
Security update for the Linux Kernel
SUSE-SU-2025:03011-1
Security update for the Linux Kernel
ALT-PU-2025-8297
ALT-PU-2025-8297: package `kernel-image-6.12` update to version 6.12.34-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-38074 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38074 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue. | 0% Низкий | больше 1 года назад | |
 | CVE-2025-38074 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38074 vhost-scsi: protect vq->log_used with vq->mutex | 0% Низкий | больше 1 года назад | |
| CVE-2025-38074 In the Linux kernel, the following vulnerability has been resolved: v ... | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
| GHSA-7p5h-9pp6-5wqc In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access vq->log_base when vq->log_used is already set to false. vhost-thread QEMU-thread vhost_scsi_complete_cmd_work() -> vhost_add_used() -> vhost_add_used_n() if (unlikely(vq->log_used)) QEMU disables vq->log_used via VHOST_SET_VRING_ADDR. mutex_lock(&vq->mutex); vq->log_used = false now! mutex_unlock(&vq->mutex); QEMU gfree(vq->log_base) log_used() -> log_write(vq->log_base) Assuming the VMM is QEMU. The vq->log_base is from QEMU userpace and can be reclaimed via gfree(). As a result, this causes invalid memory writes to QEMU userspace. The control queue path has the same issue. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | BDU:2025-14971 Уязвимость компонента scsi.c операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | ROS-20260205-80-0042 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 9 месяцев назад |
| ROS-20260205-73-0031 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 9 месяцев назад |
| ALT-PU-2025-16597 ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1 | CVSS3: 7.8 | больше 1 года назад | |
 | SUSE-SU-2025:02846-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16618 ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134 | CVSS3: 8 | больше 1 года назад | |
| SUSE-SU-2025:03023-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02996-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02969-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16605 ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1 | CVSS3: 8 | больше 1 года назад | |
| SUSE-SU-2025:02853-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02997-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03011-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-8297 ALT-PU-2025-8297: package `kernel-image-6.12` update to version 6.12.34-alt1 | CVSS3: 8 | больше 1 года назад |
Уязвимостей на страницу