139 matches found
Fedora 43 : java-25-openjdk / java-latest-openjdk (2026-760df8d7e8)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-760df8d7e8 advisory. August CPU. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue...
Scheduler-Contention Side Channel on AMD “Zen” Processors
Revisions Revision Date| Description ---|--- 2026-08-12| Initial publication...
CVE-2026-59131 AMD Zen Information Disclosure Vulnerability
...
SUSE SLES12 Security Update : kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:2153-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2153-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: -...
SUSE-SU-2026:21936-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264096. - CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumadwrite bsc1259798. - CVE-2026-23274:...
SUSE-SU-2026:21893-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264096. - CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumadwrite bsc1259798. - CVE-2026-23274:...
Linux Distros Unpatched Vulnerability : CVE-2026-46174
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resources are not improperly shared in the op cache and cause instructi...
Inefficient Algorithmic Complexity
Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in parse.go, when checking attributes iteratively. An attacker can cause excessive CPU consumption by providi...
SUSE CVE-2023-20569
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure...
PT-2026-40778
Name of the Vulnerable Software and Affected Versions AMD Zen 2-based products affected versions not specified Description Improper isolation of shared resources within the CPU operation op/µop cache on Zen 2-based products can cause incorrect instructions to be executed at a higher privilege...
USN-8177-2: Linux kernel (Real-time) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
Linux KVM Xen Buffer Overflow DoS
The vulnerability of the kvmxeninitvcpu function in the arch/x86/kvm/xen.c module of the virtualization subsystem on the x86-based Linux kernel platform is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel AMD Zen4 Heap Buffer Overflow DoS
The vulnerability of the initamdzen4 function in the arch/x86/kernel/cpu/amd.c module, which supports Linux’s x86 kernel, is related to errors in the code for generating pseudo-random numbers. Exploiting this vulnerability could allow an attacker to cause a system failure...
MGASA-2025-0258 Updated microcode packages fix security vulnerability
AMD CPU Microcode Signature Verification Vulnerability. CVE-2024-36347...
ALSA-2025:19584 Moderate: galera and mariadb security update
Galera is a fast synchronous multimaster wsrep provider replication engine for transactional databases and similar applications. For more information about wsrep API see repository. For a description of Galera replication engine see web. Security Fixes: mysql: High Privilege Denial of Service...
CVE-2011-20002
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family incl. SIPLUS variants All versions V2.0.2, SIMATIC S7-1200 CPU V2 family incl. SIPLUS variants All versions V2.0.2. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This...
EUVD-2018-8363
Malware in sbrugna...
EUVD-2020-26813
Malware in sbrugna...