554 matches found
CVE-2025-29934
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...
kernel: transient execution vulnerability in some AMD processors
A flaw was found in AMD processors. An authenticated local attacker can exploit this transient execution vulnerability to cause information disclosure across privilege boundaries. By observing microarchitectural side-channel behavior, an attacker can infer sensitive data residing in the Level 1...
kernel: information leak via transient execution vulnerability in some AMD processors
A flaw was found in AMD processors. This transient execution vulnerability may allow an unprivileged local attacker to cause information disclosure of privileged data. By exploiting how the processor speculatively processes instructions ahead of time, an attacker can infer sensitive data from...
ALSA-2025:19930 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: information leak via transient execution vulnerability in some AMD processors CVE-2024-36350 kernel: transient execution vulnerability in some AMD processors CVE-2024-36357 kernel:...
USN-7856-1 linux-hwe-6.14 vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
A transient execution vulnerability in some AMD processors may allow an attacker to extract data from previous memory stores, potentially leading to the leakage of privileged information...
USN-7833-4: Linux kernel (GCP) vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...
TEE.fail: Breaking Trusted Execution Environments via DDR5 Memory Bus Interposition
In this paper, the researchers show that the security guarantees of modern TEE offerings by Intel and AMD can be broken cheaply and easily, by building a memory interposition device that allows attackers to physically inspect all memory traffic inside a DDR5 server...
USN-7833-3: Linux kernel (AWS) vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...
Ubuntu 24.04 LTS / 25.04 : Linux kernel vulnerabilities (USN-7833-1)
"The remote Ubuntu 24.04 LTS / 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7833-1 advisory. Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Kpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an...
SUSE-SU-2025:03628-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2022-49980: USB: gadget: fix use-after-free read in usbudcuevent...
HPESBHF04956 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-3020: SEV-SNP RMP Initialization Vulnerability, Local Unauthorized Access Vulnerability
Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.9010-03-2025 HPE ProLiant DL325 Gen10 Plus v2 server - Prior to v3.9010-03-2025 HPE ProLiant DL345 Gen10 Plus server - Prior to...
MGASA-2025-0236 Updated microcode packages fix security vulnerabilities
The updated package updates AMD cpu microcode for processor family 19h, adds AMD cpu microcode for processor family 1ah and fixes security vulnerabilities for Intel processors: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel® Processors may allow an...
EUVD-2017-15001
Malware in sbrugna...
EUVD-2021-13206
Malware in sbrugna...
EUVD-2018-20538
Malware in sbrugna...
EUVD-2019-12655
Malware in sbrugna...
EUVD-2013-6687
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414647)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414647 advisory. LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. Tenable has extracted the preceding description block directly from the Unit...