RHEL 8 : kpatch-patch (RHSA-2020:3073)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3073 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 8 : kpatch-patch (RHSA-2020:3297)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3297 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. The Linux kernel suffers from a security vulnerability that stems from nVMX allowing speculative execution attacks where L2 can execute a Spectre v2 attack against L1 because L1 believes it does not...

The vulnerability of the KVM virtualization subsystem in the Linux operating system allows a hacker to gain unauthorized access and increase their privileges.

The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to the execution of the Indirect Branch Prediction Barrier IBPB mechanism on the virtual machine when the guest system uses the Indirect Branch Restricted Speculation IBRS mechanism for indirect branch...

The vulnerability of the Indirect Branch Prediction Barrier (IBPB) implementation in AMD microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Indirect Branch Prediction Barrier IBPB implementation in AMD microprocessors is related to improper cleaning of the RAS stack. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a secondary channel...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:7337)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7337-1 advisory. - a use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 - RetBleed Arbitrary Speculative Code Executi...

hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions

A flaw was found in hw. In certain processors with Intel's Enhanced Indirect Branch Restricted Speculation eIBRS capabilities, soon after VM exit or IBPB command event, the linear address following the most recent near CALL instruction prior to a VM exit may be used as the Return Stack Buffer RSB...

OESA-2022-1949 xorg-x11-server security update

Security Fixes: A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

CVE-2021-29650. The netfilter subsystem allows attackers to cause a denial of service.

Security Advisory ID : BSA-2022-1462 Component : Kernel Revision : 1.0 A denial-of-service DoS flaw was identified in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service panic because net/netfilter/xtables.c and include/linux/netfilter/xtables.h...

PT-2022-5521 · Amd +2 · Amd Processor Microcode +2

Name of the Vulnerable Software and Affected Versions: AMD processor microcode affected versions not specified Description: The issue is related to the implementation of the Indirect Branch Prediction Barrier IBPB mechanism in AMD processor microcode, which may lead to a potential information...

Intel® Processors Post Invalidation RSB Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26373 Description: Non-transparent sharing of return predictor targets...

CVE-2021-42075

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access

A flaw was found in xorg-x11-server. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function...

Fedora: Security Advisory for barrier (FEDORA-2022-3dc519f073)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for barrier (FEDORA-2022-09c1a5bab8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: barrier-2.4.0-1.fc35

Barrier is software that mimics the functionality of a KVM switch, which historically would allow you to use a single keyboard and mouse to control multiple computers. Barrier does this in software, allowing you to tell it which machine to control by moving your mouse to the edge of the screen, o...

[SECURITY] Fedora 34 Update: barrier-2.4.0-1.fc34

Barrier is software that mimics the functionality of a KVM switch, which historically would allow you to use a single keyboard and mouse to control multiple computers. Barrier does this in software, allowing you to tell it which machine to control by moving your mouse to the edge of the screen, o...

Important: kernel

Issue Overview: A logic bug flaw was found in the Linux kernel's implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced...

The vulnerability of the SProcXFixesCreatePointerBarrier function in the X Window System X.Org Server implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SProcXFixesCreatePointerBarrier function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible limits of the data buffer. Exploiting this vulnerability can allow an attacker to access confidential data,...

Security Bulletin: Vulnerability in Linux Kernel affects IBM Spectrum Copy Data Management (CVE-2021-29650)

Summary A denial of service vulnerability in the Linux Kernel may affect IBM Spectrum Copy Data Management Vulnerability Details CVEID: CVE-2021-29650 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by the lack of a full memory barrier upon the assignment of a new table val...