https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:02:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01416 bdu:2021-01416 https://cve.radiocsirt.org/vuln/bdu:2021-01416 https://cve.radiocsirt.org/vuln/certfr-2018-avi-557 certfr-2018-avi-557 https://cve.radiocsirt.org/vuln/certfr-2018-avi-557 https://cve.radiocsirt.org/vuln/cnvd-2018-20467 cnvd-2018-20467 https://cve.radiocsirt.org/vuln/cnvd-2018-20467 https://cve.radiocsirt.org/vuln/euvd-2026-68991 EUVD-2026-68991 https://cve.radiocsirt.org/vuln/euvd-2026-68991 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18021 <p>arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.</p> <p>arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-18021 https://cve.radiocsirt.org/vuln/ghsa-6vp5-5gv4-mcqp <p>arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.</p> <p>arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.</p> https://cve.radiocsirt.org/vuln/ghsa-6vp5-5gv4-mcqp https://cve.radiocsirt.org/vuln/gsd-2018-18021 gsd-2018-18021 https://cve.radiocsirt.org/vuln/gsd-2018-18021 https://cve.radiocsirt.org/vuln/rhsa-2018:3656 <p>kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation kernel: Privilege escalation on arm64 via KVM hypervisor</p> <p>kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation kernel: Privilege escalation on arm64 via KVM hypervisor</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3656 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18021 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-raspi2, Ubuntu:16.04:LTS: linux-snapdragon, Ubuntu:Pro:FIPS-updates:16.04:LTS: linux-fips, Ubuntu:18.04:LTS: linux and 14 more</p> <p>arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-raspi2, Ubuntu:16.04:LTS: linux-snapdragon, Ubuntu:Pro:FIPS-updates:16.04:LTS: linux-fips, Ubuntu:18.04:LTS: linux and 14 more</p> <p>arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18021