CVE-2023-32100: Compiler Removal of Code to Clear Buffers

Compiler removal of buffer clearing in slisedrivermaccompute in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

PT-2023-19793 · Silicon · Gecko Platform Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko Platform SDK versions 4.2.1 and earlier Description: The issue arises from the compiler removal of buffer clearing in the sli se opaque import key function, leading to key material duplication to RAM. This results in a...

CVE-2023-32099: Compiler Removal of Code to Clear Buffers

Compiler removal of buffer clearing in slisesignhash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

CVE-2023-32098: Compiler Removal of Code to Clear Buffers

Compiler removal of buffer clearing in slisesignmessage in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

PT-2023-23608 · Silicon · Gecko Platform Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko Platform SDK versions 4.2.1 and earlier Description: The issue arises from the compiler removal of buffer clearing in the sli se sign hash function, leading to key material duplication to RAM. This results in a security...

CVE-2023-0965: Compiler Removal of Code to Clear Buffers

Compiler removal of buffer clearing in slicryptoacctransparentkeyagreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

Silicon Labs Gecko SDK security vulnerabilities

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK v4.2.1 and earlier versions, which stems from ...

PT-2023-16778 · Silicon · Gecko Platform Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko Platform SDK versions 4.2.1 and earlier Description: The issue arises from the compiler removal of buffer clearing in the sli se driver key agreement function, leading to key material duplication to RAM. This results in a...

Silicon Labs Gecko SDK security vulnerabilities

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK v4.2.1 and earlier versions, which stems from...

CVE-2023-32096: Compiler Removal of Code to Clear Buffers

Compiler removal of buffer clearing in slicryptotransparentaeadencrypttag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

Silicon Labs Gecko SDK security vulnerabilities

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.2.1 and prior versions, which stems from a...

PT-2023-23606

Name of the Vulnerable Software and Affected Versions Silicon Labs Gecko Platform SDK versions 4.2.1 and earlier Description The issue arises from the compiler removal of buffer clearing in the sli crypto transparent aead decrypt tag function, leading to key material duplication to RAM. This...

Silicon Labs Gecko SDK security vulnerabilities

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.2.1 and earlier versions, which stems from a...

PT-2023-23607

Name of the Vulnerable Software and Affected Versions Silicon Labs Gecko Platform SDK versions 4.2.1 and earlier Description The issue arises from the compiler removal of buffer clearing in the sli se sign message function, leading to key material duplication to RAM. This results in a security...

PT-2023-23610

Name of the Vulnerable Software and Affected Versions Silicon Labs Gecko Platform SDK versions 4.2.1 and earlier Description The issue arises from the compiler removal of buffer clearing in the sli se driver mac compute function, leading to key material duplication to RAM. This results in a...

SUSE CVE-2019-19338

A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort TAA error occurs. When a guest is running on a host CPU affected by the TAA flaw TAANO=0, but is no...

Unbreakable Enterprise kernel security update

5.4.17-2136.308.9 - x86/speculation/mmio: Fix late microcode loading Patrick Colp Orabug: 34276099 5.4.17-2136.308.8 - Add debugfs for controlling MMIO state data Kanth Ghatraju Orabug: 34202259 CVE-2022-21123 CVE-2022-21127 CVE-2022-21125 CVE-2022-21166 - KVM: x86/speculation: Disable Fill buffe...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.308.9 - x86/speculation/mmio: Fix late microcode loading Patrick Colp Orabug: 34276099 5.4.17-2136.308.8 - Add debugfs for controlling MMIO state data Kanth Ghatraju Orabug: 34202259 CVE-2022-21123 CVE-2022-21125 CVE-2022-21127 CVE-2022-21166 - KVM: x86/speculation: Disable Fill buffe...

PT-2021-26838

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.292 Description: The issue concerns a problem with clearing user buffers in the Linux Kernel, specifically with the use of the clear user function. The actual impact and potential for attacks have not been...

UBUNTU-CVE-2019-19338

A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort TAA error occurs. When a guest is running on a host CPU affected by the TAA flaw TAANO=0, but is no...