trevex

Trevex - The Transient Execution Vulnerability Explorer Supported Platforms We support the following environments: OS / Distros Trevex is developed and tested on Ubuntu 22.04 LTS and 24.04 LTS. While other distros may work, some parts of the framework, e.g., the dependency checking and...

Astra Linux – Vulnerability found in Linux 5.10 and Linux 6.1, Intel Microcode

The exposure of information through microarchitectural states after transient execution from certain register files on some IntelR AtomR processors may allow an authenticated user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Intel Microcode

A domain-bypass transient execution vulnerability in some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure through local access...

SUSE CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

Linux Distros Unpatched Vulnerability : CVE-2026-20917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel...

CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

ALPINE-CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

UBUNTU-CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

CVE-2026-20917

The CVE-2026-20917 entry describes exposure of sensitive information due to incorrect data forwarding during transient execution for some Intel processors in Ring 0 (Hypervisor and Kernel). The underlying cause is a data-forwarding bug during transient execution that may allow a privileged system...

CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

EUVD-2026-56822

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

PT-2026-70802

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Incorrect data forwarding during transient execution within Ring 0 Hypervisor and Kernel may lead to the exposure of sensitive information. A system software adversary with privileg...

2026.3 IPU, Intel® Processor Load Value Injection Zero Data Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20917 Description: Exposure of sensitive information caused by incorrect da...

Siemens SIMATIC S7-1500 CPU 1518 MFP Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution (CVE-2024-28956)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505617; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

TencentOS Server 2: microcode_ctl (TSSA-2025:1023)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1023 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2025-35979

A flaw was found in the kernel. This vulnerability, affecting some IntelR Processors, involves shared microarchitectural predictor state that influences transient execution within VMX non-root guest operation. An unprivileged software adversary with an authenticated user can exploit this locally ...

OESA-2026-2529 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information...

OESA-2026-2460 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information...