2643 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004182)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004182 advisory. A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabl...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003798)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003798 advisory. The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001557)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001557 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004365)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004365 advisory. The Linux kernel allows userspace processes to enable mitigations by calling prctl with PRSETSPECULATIONCTRL which disables the speculation feature as well as by usi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002539 advisory. arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003365)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003365 advisory. arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002610)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002610 advisory. The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003204)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003204 advisory. The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1 does not always fill RSB upon a context switch, which makes it...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001742)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001742 advisory. The Linux kernel allows userspace processes to enable mitigations by calling prctl with PRSETSPECULATIONCTRL which disables the speculation feature as well as by usi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001686)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001686 advisory. Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch...
CVE-2019-18233
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000500)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000500 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000499)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000499 advisory. A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabl...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000205)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000205 advisory. An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000394)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000394 advisory. The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000256)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000256 advisory. A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69,...
microcode_ctl: From CVEorg collector
New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...
microcode_ctl: From CVEorg collector
New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990540)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990540 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in ipmetricsconvert if !type continue; if type RTAXMAX...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990441)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990441 advisory. In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as...