kernel: hw: Spectre SWAPGS gadget vulnerability

A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel...

CVE-2019-15031

In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction via the hardware transactional memory instruction tbegin and then accesses vector registers...

kernel: hw: Spectre SWAPGS gadget vulnerability

A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel...

Sponsored Podcast: The Operationalization of Data With a Purpose

Security, intel and fraud teams are swimming in data. Data is not the problem, but operationalizing and making use of the data we have is. This podcast is sponsored by SpyCloud Taking this one step further is making use of the data with a purpose, specifically, to interrupt the criminal lifecycle...

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2019-32030)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An input validation error vulnerability exists in F5 BIG-IP. An attacker could exploit the vulnerability to interrupt service...

Linux interrupt handler DoS

The vulnerability of the interrupt handler sndcs5535audiointerrupt in the Linux kernel’s sound/pci/cs5535audio/snd-cs5535audio.ko module arises due to the swapping of the null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure by connecting a CS5535 Audio...

Astra Linux Interrupt Handler DoS

The vulnerability in the implementation of the interrupt handler dc395x Interrupt for the Astra Linux operating system’s kernel the loaded module drivers/scsi/dc395x.ko is related to a memory release error. In the function finddcb, called by the dc395x Interrupt handler, a reference is made to th...

Linux interrupt handler DoS

The vulnerability of the interrupt handler sndkorg1212interrupt in the Linux kernel’s sound/pci/korg1212/snd-korg1212.ko module is related to the swapping of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a system failure when a Korg 1212 device is connected. Thi...

lolainterrupt Kernel Failure

The vulnerability of the interrupt handler lolainterrupt in the sound/pci/lola/snd-lola.ko module of the Linux operating system is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a system failure when a Digigram Lola device, which appears ...

Linux/x86 - Reverse Shell Shellcode (91 Bytes) + Python Wrapper

Exploit Title: Linux/x86 - Reverse Shell Shellcode 91 Bytes + Python Wrapper Exploit Author: Dave Sully Vendor Homepage: Software Link: NA Version: NA Tested on: Ubuntu 16.04 CVE : NA This is the raw assembly ; Filename: reverseshell.nasm ; Author: Dave Sully ; Website: http://suls.co.uk ; Purpos...

UBUNTU-CVE-2019-3887

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister MSR access with nested=1 virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash t...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.32.1 - x86/fpu: Factor out memsetxstate, 0 in fpufinit paths Oleg Nesterov Orabug: 29012034 - x86/fpu: Always allow FPU in interrupt if useeagerfpu Oleg Nesterov Orabug: 29012034 - x86/fpu: Fix 32-bit signal frame handling Dave Hansen Orabug: 29012034 - x86/fpu: Don't do...

PT-2018-2855

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the dc395x interrupt handler of the Astra Linux kernel, specifically in the find dcb function called from the dc395x interrupt...

PT-2018-2845

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the lola interrupt handler of the sound/pci/lola/snd-lola.ko module. This can be exploited to cause a denial of service when a...

UBUNTU-CVE-2018-19406

kvmpvsendipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service NULL pointer dereference and BUG via crafted system calls that reach a situation where the apic map is uninitialized...

F5 BIG-IP APM client svpn component design vulnerability

F5 BIG-IP APM client is the client software in a suite of access and security solutions from F5 USA. The software provides unified access to business-critical applications and networks. svpn component is one of the VPN components. A security vulnerability exists in the svpn component of the F5...

openSUSE: Security Advisory for xen (openSUSE-SU-2018:1487-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 26 : xen (2018-7cd077ddd3)

x86: mishandling of debug exceptions XSA-260, CVE-2018-8897 x86 vHPET interrupt injection errors XSA-261, CVE-2018-10982 1576089 qemu may drive Xen into unbounded loop XSA-262, CVE-2018-10981 1576680 Note that Tenable Network Security has extracted the preceding description block directly from th...

Kernel: error in exception handling leads to DoS

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the...

What we’ve got here is failure to communicate: OS vendors misread CPU docs, create flaw

In a memorable scene from “Jumpin’ Jack Flash,” Whoopi Goldberg struggles to understand the lyrics of the eponymous song from the Rolling Stones, as she pleads: “Mick, Mick, Mick, speak English!” It appears that multiple operating system vendors had similar trouble interpreting Intel and AMD...