CentOS Linux 7 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1709727025)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1709727025 advisory. - A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result...

Security update for xen

This update for xen fixes the following issues CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264066. CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. CVE-2026-23558: grant tabl...

EUVD-2025-209577

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality...

CVE-2025-54505: Exposure of Sensitive Information during Transient Execution

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality...

CVE-2025-29943: Write-what-where Condition

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest...

CVE-2025-29943

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest...

Important: linux-firmware

Issue Overview: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. CVE-2025-54514 Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence...

EUVD-2025-198505

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values...

CVE-2025-29934: Incomplete Cleanup

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...

CVE-2025-62626: Improper Handling of Insufficient Entropy in TRNG

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values...

EUVD-2021-13207

Malware in sbrugna...

EUVD-2021-13147

Malware in sbrugna...

EUVD-2020-5245

Malware in sbrugna...

EUVD-2012-2913

Malware in sbrugna...

EUVD-2021-13124

Malware in sbrugna...

EUVD-2023-38408

Malicious code in bioql PyPI...

EUVD-2023-38409

Malicious code in bioql PyPI...

EUVD-2021-33400

Malicious code in bioql PyPI...

EUVD-2023-24771

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-26401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. CVE-2021-26401 Note that Nessus relies on the presence of the package a...