Spectre-Vulnerability-CVE-2017-5753-

Spectre-Vulnerability-CVE-2017-5753- このリポジトリには、Specre脆弱性に関するレポートと、脆弱性を悪用するための詳細が含まれています。 これに使用されたProof of Conceptは、GitHubリポジトリ https://github.com/Eugnis/spectre-attack から参照されました。 元々、 このコードはグラーツ工科大学のレポート https://spectreattack.com/spectre.pdf によるものです。 Source.cファイルをコンパイルする際は、 gcc -std=c99 Source.c -...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fixed potential Spectre v1 gadget It appears that nr could be a Spectre v1 gadget, as it is provided by a user and used as an array index. This issue prevents the contents of kernel memory from being leaked to use...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv4: Prevent potential spectre v1 gadgets in ipmetricsconvert if !type continue; if type RTAXMAX return -EINVAL; ... metricstype - 1 = val; @type is used as an array index, and we need to prevent CPU speculation or risk leaking...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

There is a vulnerability in the Linux Kernel within the KVM framework: nVMX, which allows for speculative execution attacks. L2 can execute Spectre v2 attacks on L1, as L1 believes it does not need retpolines or IBPB after executing L2, due to KVM L0 advertising eIBRS support to L1. An attacker a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add a missing arrayindexnospec call to memtopgetpagecount. The level field is controlled by the user space and is used to read from an array. Add the missing arrayindexnospec call to prevent speculative execution...

PT-2026-72424

In the Linux kernel, the following vulnerability has been resolved: s390/perf cpum cf: Add missing array index nospec to hw perf event init ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

CVE-2026-68269 drm/i915/gem: Add missing nospec on parallel submit slot

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021586)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021586 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the TSV110 processor’s susceptibility to Spectre-BHB attacks, potentially leading to information...

AZL-83306 CVE-2026-31483 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec boundary to prevent access past the syscall function pointer tables...

K000160908: Linux kernel vulnerability CVE-2019-15902

Security Advisory Description A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in...

MiracleLinux 4 : microcode_ctl-1.17-25.4.AXS4 (AXSA:2018-2518:02)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2518:02 advisory. This update supersedes microcode provided by Asianux with the CVE-2017-5715 Spectre CPU branch injection vulnerability mitigation. Historically, Asianux has...

MiracleLinux 7 : microcode_ctl-2.1-22.5.el7 (AXSA:2018-2519:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2519:02 advisory. This update supersedes microcode provided by Asianux with the CVE-2017-5715 Spectre CPU branch injection vulnerability mitigation. Historically, Asianux has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000256 advisory. A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989389 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in ipmetricsconvert if !type continue; if type RTAXMAX...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989023 advisory. In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM's mechanism for...

EUVD-2018-4341

Malware in sbrugna...

EUVD-2018-7446

Malware in sbrugna...

EUVD-2019-6812

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414353 advisory. A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks.L2 can carry out Spectre v2 attacks on L1 due to L1 thinking ...