ROS-20260928-73-0120

The vulnerability of the fpuclearuserstates function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s x86 kernel support module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-97942 x86/alternatives: Exclude text poking against change_page_attr()

In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude text poking against changepageattr From time to time, the following BUG can be observed in the x86 alternatives patching code 0: kernel BUG at arch/x86/kernel/alternative.c:2576! Oops: invalid opcode: 00...

Linux Distros Unpatched Vulnerability : CVE-2026-97942

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/alternatives: Exclude text poking against changepageattr From time to time, the following BUG can be observed in the x86 alternatives patching code 0: kern...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000868)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000868 advisory. Buffer overflow in the mpoverridelegacyirq function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafte...

The vulnerability of the arch/x86 kernel component of the Linux operating system, which allows a hacker to gain access to confidential data

The vulnerability of the arch/x86 kernel component of the Linux operating system is related to resource leaks. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the __fpu__restore_sig() function in the arch/x86/kernel/fpu/signal.c module on the x86 platform of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fpurestoresig function in the arch/x86/kernel/fpu/signal.c module on the x86 kernel of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-53474: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bankmap Thee maximum number of MCA banks is 64 MAXNRBANKS, see a0bc32b3cacf "x86/mce: Increase maximum number of banks to 64". However, the bankmap which contains a bitfield of which banks to initializ...

The vulnerability of the arch/x86 kernel component of the Linux operating system, which allows a hacker to gain access to confidential data

The vulnerability of the arch/x86 kernel component of the Linux operating system is related to the exposure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

CVE-2024-42240

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

CVE-2018-15594: Exposure of Sensitive Information to an Unauthorized Actor

arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests...

CVE-2018-7995: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the storeintwithrestart function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service panic by leveraging root access to write to the checkinterval file in a /sys/devices/system/machinecheck/machinecheck directory...

CVE-2017-11473: Buffer Copy without Checking Size of Input

Buffer overflow in the mpoverridelegacyirq function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table...

CVE-2016-3157: Undefined Security Weakness

The switchto function in arch/x86/kernel/process64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service guest OS crash, or obtain sensitive information by leveraging I/O port access...

CVE-2015-2830: Undefined Security Weakness

arch/x86/kernel/entry64.S in the Linux kernel before 3.19.2 does not prevent the TSCOMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the 1 fork or 2 close system call, as demonstrated b...

CVE-2015-2666: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the getmatchingmodelmicrocode function in arch/x86/kernel/cpu/microcode/intelearly.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to th...

CVE-2014-9419: Exposure of Sensitive Information to an Unauthorized Actor

The switchto function in arch/x86/kernel/process64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage TLS descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application...

CVE-2014-8133

arch/x86/kernel/tls.c in the Thread Local Storage TLS implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a...

CVE-2014-9322: Improper Privilege Management

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

CVE-2014-8133: Undefined Security Weakness

arch/x86/kernel/tls.c in the Thread Local Storage TLS implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a...

CVE-2014-8134: Undefined Security Weakness

The paravirtopssetup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirtenabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value...