Threats Tagged 'cwe-1189'

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) Bug Fix(es) and Enhancement(s): * Kernel crash in bpf_for_each_array_elem() due to missing backport of upstream commit 4b6313cf99b0 (JIRA:RHEL-191844) * gfs2: xfstests generic/363 failure [rhel-8.10.z] (JIRA:RHEL-214099) * RHEL8: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [RHEL 8.10Z] (JIRA:RHEL-188270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.

Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.

MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2025-54514#cwe-1189

On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.

MediumVulnerabilityGermanyFranceNetherlands+5#cve#cve-2024-11185#cwe-1189