Published: 05/01/2024 Updated: 11/01/2024

CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2

VMScore: 0

An issue exists in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0. (CVE-2023-31085) A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests. (CVE-2023-34324) ipv4: fix null-deref in ipv4_link_failure NOTE: www.openwall.com/lists/oss-security/2023/10/02/8NOTE: git.kernel.org/linus/0113d9c9d1ccc07f5a3710dac4aa24b6d711278c (6.6-rc3) (CVE-2023-42754)

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen -
linux linux kernel

A race condition between two functions, lmLogClose() and txEnd(), in the Linux kernel's JFS filesystem can lead to a use-after-free vulnerability and crash (CVE-2023-3397) A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests (CVE-2023-34324) A heap out-of-bounds write vulnerability in th ...

A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests (CVE-2023-34324) ...

An issue was discovered in drivers/mtd/ubi/cdevc in the Linux kernel 62 There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0 (CVE-2023-31085) A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests (CVE-2023-3432 ...

A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests (CVE-2023-34324) ...

An issue was discovered in drivers/mtd/ubi/cdevc in the Linux kernel 62 There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0 (CVE-2023-31085) A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests (CVE-2023-3432 ...

Description of Problem Several issues have been discovered that affect Citrix Hypervisor 82 CU1 LTSR and may allow malicious privileged code in a guest VM to:i)  Compromise an AMD-based host via a passed through PCI device: CVE-2023-34326ii)  Compromise the host when a specific administrative action is taken (see Mitigating Factors below ...

CWE-400 https://xenbits.xenproject.org/xsa/advisory-441.html https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2023-1883.html https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2023-055.html

CVE-2023-34324

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect