2825 matches found
New SWAPGS Side-Channel Attack Bypasses Spectre and Meltdown Defenses
Millions of newer Intel microprocessors manufactured after 2012 are vulnerable to a new type of side-channel attack dubbed SWAPGS. SWAPGS is similar to existing side-channel attacks such as Spectre and Meltdown and similarly could allow a hacker to gain access to sensitive data such as passwords...
kernel: hw: Spectre SWAPGS gadget vulnerability
A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel...
Important: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
SWAPGS Attack â New Speculative Execution Flaw Affects All Modern Intel CPUs
A new variant of the Spectre Variant 1 side-channel vulnerability has been discovered that affects all modern Intel CPUs, and probably some AMD processors as well, which leverage speculative execution for high performance, Microsoft and Red Hat warned. Identified as CVE-2019-1125, the vulnerabili...
CVE-2019-1125
An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...
UBUNTU-CVE-2019-1125
An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...
kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests
It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests...
July 9, 2019âKB4507456 (Security-only update)
None None...
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...
July 9, 2019âKB4507464 (Security-only update)
None None...
July 9, 2019âKB4507461 (Security-only update)
None None...
July 9, 2019âKB4507455 (OS Build 16299.1268)
None None...
July 9, 2019âKB4507457 (Security-only update)
None None...
July 9, 2019âKB4507453 (OS Build 18362.239)
None None...
July 9, 2019âKB4507452 (Monthly Rollup)
None None...
July 9, 2019âKB4507458 (OS Build 10240.18275)
None None...
July 9, 2019âKB4507469 (OS Build 17763.615)
None None...
July 9, 2019âKB4507448 (Monthly Rollup)
None None...