Количество 103
Количество 103
GHSA-wpw8-53h7-xqcq
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch between stored and computed GFNs; the bug could be triggered by changing a PDE mapping from outside the guest, and then deleting a memslot. The rmap_remove() call would miss entries created after the PDE change because the GFN of the leaf SPTE does not match the GFN of the struct kvm_mmu_page. A similar hole however remains if the modified PDE points to a non-leaf page. In this case the gfn can be made to match, but the role does not match: the original large 2MB page creates a kvm_mmu_page with direct=1, while the new 4KB needs a kvm_mmu_page with direct=0. However, kvm_mmu_get_child_sp() does not compare the role, and therefore reuses the page. The next step is installing a leaf (4KB) SPTE on the new path which records an r...
BDU:2026-09298
Уязвимость функции rmap_remove() подсистемы виртуализации Kernel-based Virtual Machine (KVM) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
SUSE-SU-2026:0984-1
Security update for the Linux Kernel
SUSE-SU-2026:3393-1
Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3372-1
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3350-1
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:3301-1
Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3248-1
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
ROS-20260826-80-0001
Уязвимость kernel-lt
ROS-20260826-73-0001
Уязвимость kernel-lt
SUSE-SU-2026:1003-1
Security update for the Linux Kernel
SUSE-SU-2026:1041-1
Security update for the Linux Kernel
ELSA-2026-50373
ELSA-2026-50373: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2026:3369-1
Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
ELSA-2026-50374
ELSA-2026-50374: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2026:2383-1
Security update for the Linux Kernel
SUSE-SU-2026:3809-1
Security update for the Linux Kernel
SUSE-SU-2026:2310-1
Security update for the Linux Kernel
ELSA-2026-500150
ELSA-2026-500150: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2026:2658-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
GHSA-wpw8-53h7-xqcq In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch between stored and computed GFNs; the bug could be triggered by changing a PDE mapping from outside the guest, and then deleting a memslot. The rmap_remove() call would miss entries created after the PDE change because the GFN of the leaf SPTE does not match the GFN of the struct kvm_mmu_page. A similar hole however remains if the modified PDE points to a non-leaf page. In this case the gfn can be made to match, but the role does not match: the original large 2MB page creates a kvm_mmu_page with direct=1, while the new 4KB needs a kvm_mmu_page with direct=0. However, kvm_mmu_get_child_sp() does not compare the role, and therefore reuses the page. The next step is installing a leaf (4KB) SPTE on the new path which records an r... | CVSS3: 8.8 | 1% Низкий | 2 месяца назад | |
BDU:2026-09298 Уязвимость функции rmap_remove() подсистемы виртуализации Kernel-based Virtual Machine (KVM) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 7 | 1% Низкий | 3 месяца назад | |
SUSE-SU-2026:0984-1 Security update for the Linux Kernel | 6 месяцев назад | |||
SUSE-SU-2026:3393-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) | около 1 месяца назад | |||
SUSE-SU-2026:3372-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7) | около 1 месяца назад | |||
SUSE-SU-2026:3350-1 Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5) | около 1 месяца назад | |||
SUSE-SU-2026:3301-1 Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) | около 2 месяцев назад | |||
SUSE-SU-2026:3248-1 Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) | около 2 месяцев назад | |||
ROS-20260826-80-0001 Уязвимость kernel-lt | CVSS3: 7 | 1% Низкий | 16 дней назад | |
ROS-20260826-73-0001 Уязвимость kernel-lt | CVSS3: 7 | 1% Низкий | 16 дней назад | |
SUSE-SU-2026:1003-1 Security update for the Linux Kernel | 6 месяцев назад | |||
SUSE-SU-2026:1041-1 Security update for the Linux Kernel | 6 месяцев назад | |||
ELSA-2026-50373 ELSA-2026-50373: Unbreakable Enterprise kernel security update (IMPORTANT) | 2 месяца назад | |||
SUSE-SU-2026:3369-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) | около 1 месяца назад | |||
ELSA-2026-50374 ELSA-2026-50374: Unbreakable Enterprise kernel security update (IMPORTANT) | 2 месяца назад | |||
SUSE-SU-2026:2383-1 Security update for the Linux Kernel | 3 месяца назад | |||
SUSE-SU-2026:3809-1 Security update for the Linux Kernel | 15 дней назад | |||
SUSE-SU-2026:2310-1 Security update for the Linux Kernel | 3 месяца назад | |||
ELSA-2026-500150 ELSA-2026-500150: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 месяца назад | |||
SUSE-SU-2026:2658-1 Security update for the Linux Kernel | 3 месяца назад |
Уязвимостей на страницу