Lucene search
+L

25 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR in the function speculationctrlupdate, but the IBPB is only issued at the next schedul...

7.5CVSS6.5AI score0.02399EPSS
SaveExploits3References2
Redos
Redos
•added 2026/09/04 12:00 a.m.•12 views

ROS-20260904-73-0001

The vulnerabilities of the Branch Target Buffer BTB and Indirect Branch Predictor IBP in Intel microprogramming devices stem from the state of the race within the pipeline. Exploiting these vulnerabilities can allow attackers to disclose protected information by executing specially crafted...

5.7CVSS6.8AI score0.00268EPSS
SaveExploits0
EUVD
EUVD
•added 2026/03/04 12:30 p.m.•25 views

EUVD-2026-9392

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

6.4CVSS5.9AI score0.00281EPSS
SaveExploits0References10
OSV
OSV
•added 2026/01/28 4:16 p.m.•19 views

CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS5.8AI score
SaveExploits0References3
OSV
OSV
•added 2026/01/28 4:16 p.m.•19 views

ALPINE-CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS5.9AI score0.00147EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/28 4:16 p.m.•16 views

CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS0.00147EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/28 4:16 p.m.•20 views

UBUNTU-CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS5.9AI score0.00147EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/28 3:33 p.m.•21 views

EUVD-2026-4882

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS5.9AI score0.00147EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/28 3:33 p.m.•11 views

CVE-2026-23553 x86: incomplete IBPB for vCPU isolation

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

5.9AI score0.00147EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/28 3:33 p.m.•44 views

CVE-2026-23553

The Xen hypervisor contains a flaw in its context switch logic where it attempts to skip an Indirect Branch Prediction Barrier (IBPB) when a vCPU returns to a CPU where it was the previous vCPU to run. While this maintains isolation between vCPUs, it prevents the guest kernel from correctly isola...

2.9CVSS5.9AI score0.00147EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2026/01/28 3:33 p.m.•9 views

CVE-2026-23553

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...

2.9CVSS5.9AI score0.00147EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•25 views

Xen security vulnerabilities

Xen is an open-source virtual machine monitor product developed by Xen. This product allows different and incompatible operating systems to run on the same computer. It also supports migration during runtime, ensuring smooth operation and avoiding downtime. Xen has security vulnerabilities; these...

2.9CVSS6.1AI score0.00147EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•26 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/08/18 3:01 p.m.•16 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 7:48 p.m.•23 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 6:51 p.m.•20 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 4:55 p.m.•16 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 3:39 p.m.•26 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 3:33 p.m.•20 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 2:55 p.m.•16 views

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

5.7CVSS6.7AI score0.00413EPSS
SaveExploits0References6
Rows per page
Query Builder