Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414671 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414312 advisory. A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality wa...

EUVD-2023-23866

Malicious code in bioql PyPI...

EUVD-2022-34479

Malicious code in bioql PyPI...

EUVD-2025-29591

Malicious code in bioql PyPI...

EUVD-2023-57686

Malicious code in bioql PyPI...

EUVD-2022-34211

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-39823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks...

AZL-74718 CVE-2025-39823 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

DEBIAN-CVE-2025-39823

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

AZL-67419 CVE-2025-39823 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

CVE-2025-39823 KVM: x86: use array_index_nospec with indices that come from guest

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

CVE-2025-39823 KVM: x86: use array_index_nospec with indices that come from guest

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not using arrayindexnospec for indexes from clients, which could lead to a speculative execution side-channel...

DEBIAN-CVE-2025-40300

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor like QEMU. Existing mitigations already protect kernel/KVM...

Jump over ASLR - Branch Predictors

This project demonstrates applied research in C that illustrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of Address Space Layout Randomization ASLR...

Linux Distros Unpatched Vulnerability : CVE-2021-26313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of...

Linux Distros Unpatched Vulnerability : CVE-2024-36348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled...

Linux Distros Unpatched Vulnerability : CVE-2020-0551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via ...

Linux Distros Unpatched Vulnerability : CVE-2023-52874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Zero out the missing RSI in TDXHYPERCALL macro In the TDXHYPERCALL asm, after the...