CVE-2021-46778

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading SMT. By measuring the contention level on scheduler queues an attacker may potentially leak sensitive...

CVE-2021-46778

A contention-based side channel vulnerability was found in hw. Some AMD CPUs using simultaneous multithreading SMT may allow an attacker to measure the contention level on scheduler queues, leading to potential leakage of sensitive information...

GSD-2022-1004650 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()

block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...

GSD-2022-1004500 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()

block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

GSD-2022-1004445 net: tun: stop NAPI when detaching queues

net: tun: stop NAPI when detaching queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...

GSD-2022-1004304 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()

block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

PT-2022-32566

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.18.6. The actual impact and attack...

PT-2022-32912

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.10.124. The actual impact and attack...

PT-2022-32762

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.15.49. The actual impact and attack...

Microsoft Azure 加密问题漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A vulnerability exists in Microsoft Azure with cryptographic issues. The following products and versions are affected: Azure Storage Blobs client library for...

GSD-2022-1003837 rtl818x: Prevent using not initialized queues

rtl818x: Prevent using not initialized queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003527 sfc: fix considering that all channels have TX queues

sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1002963 sfc: fix considering that all channels have TX queues

sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002631 sfc: fix considering that all channels have TX queues

sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...

PT-2022-30894

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...

PT-2022-31790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...

PT-2022-31955

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the rtl818x driver, where uninitialized queues are used. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32100

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the rtl818x driver, where uninitialized queues are used. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31756

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the rtl818x driver, where uninitialized queues are used. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...