Vendors / Linux Records 21728 All Threatist records
Exploited (KEV) 34 In CISA KEV
CVSS critical 970 CVSS 9.0–10.0
CVSS high 8159 CVSS 7.0–8.9
Exploited now Linux records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic inform…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01741 · Published 2019-11-13 · No fix listed CWE-617
Priority LOW 35
An issue was discovered in ACRN before 2.5.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00664 · Published 2021-07-02 · No fix listed CWE-120
Priority LOW 35
An issue was discovered in ACRN before 2.5.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-07-02 · No fix listed CWE-476
Priority LOW 35
ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01215 · Published 2021-07-02 · No fix listed CWE-476
Priority LOW 35
The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-07-02 · No fix listed CWE-416
Priority LOW 35
The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-07-02 · No fix listed CWE-416
Priority LOW 35
ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01212 · Published 2021-07-02 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
Critical970 High8159 Medium8214 Low408 No CVSS3977