217 matches found
CVE-2022-0002
Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-0001
Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
Information disclosure
Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
Information disclosure
Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-0002
Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-0002
Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-0001
Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-0001
Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2022-0001
CVE-2022-0001 pertains to Intel CPUs and Branch History Injection (BHI). The issue arises from non-transparent sharing of branch predictor selectors between contexts, potentially allowing an authorized local attacker to disclose information via speculative execution side channels. Affected materi...
CVE-2022-0001
A flaw was found in hw. The Branch History Injection BHI describes a specific form of intra-mode BTI. This flaw allows an unprivileged attacker to manipulate the branch history before transitioning to supervisor or VMX root mode. This issue is an effort to cause an indirect branch predictor to...
UBUNTU-CVE-2022-0002
Non-transparent sharing of branch predictor within a context in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
UBUNTU-CVE-2022-0001
Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
AMD CPUs 安全漏洞
AMD CPUs is a GPU component from AMD Corporation. A security vulnerability exists in AMD CPUs that stems from an attacker being able to bypass access restrictions to AMD processor data via the branch predictor selector lfence/jmp to read sensitive information...
Important: kernel
Issue Overview: AMD recommends using a software mitigation for this issue, which the kernel is enabling by default. The Linux kernel will use the generic retpoline software mitigation, instead of the specialized AMD one, on AMD instances 5a. This is done by default, and no administrator action is...
Important: kernel
Issue Overview: AMD recommends using a software mitigation for this issue, which the kernel is enabling by default. The Linux kernel will use the generic retpoline software mitigation, instead of the specialized AMD one, on AMD instances 5a. This is done by default, and no administrator action is...
PT-2022-2087 · Intel +9 · Intel Processors +12
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Intel Core i7-1185G7 Intel Core i9-12900K Haswell series Description: The issue is related to non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors,...
Intel® Processor Advisory
Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-0001 Description: Non-transparent sharing of branch predictor selecto...
Exploit for Type Confusion in Linux Linux_Kernel
Proof of Concept for CVE-2021-33624 compile with gcc -pthre...
USN-4485-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Timothy Michaud discovered that the i915 graphics driver in the Linux kernel did not properly validate user memory locations for the i915gemexecbuffer2ioctl. A local attacker could possibly use this to cause a denial of service or execute arbitrary code. CVE-2018-20669 It was discovered that the...
USN-4483-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
Chuhong Yuan discovered that go7007 USB audio device driver in the Linux kernel did not properly deallocate memory in some failure conditions. A physically proximate attacker could use this to cause a denial of service memory exhaustion. CVE-2019-20810 Fan Yang discovered that the mremap...