Rocky Linux 8 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2021_3027)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213027 advisory. hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache Eviction Sampling CVE-2020-0549...

MiracleLinux 4 : microcode_ctl-1.17-33.32.0.4.AXS4 (AXSA:2021-2349:12)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2349:12 advisory. hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache Eviction Sampling...

EUVD-2024-54760

Malicious code in bioql PyPI...

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2024-36357

CVE-2024-36357 describes a transient execution vulnerability in some AMD processors that can allow an attacker to infer data from the L1D cache, potentially leaking sensitive information across privileged boundaries. The CVE is tracked in multiple security advisories and kernel security updates a...

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2024-36357: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

PT-2025-28502

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across...

CVE-2023-50559

An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache...

CVE-2023-50559

An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache...

Information disclosure

An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache...

CVE-2023-50559

An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache...

PT-2023-31586

Name of the Vulnerable Software and Affected Versions XiangShan version 2.1 Description An issue was discovered in XiangShan, allowing local attackers to obtain sensitive information via the L1D cache. Recommendations For XiangShan version 2.1, at the moment, there is no information about a newer...

CVE-2023-50559

CVE-2023-50559 affects XiangShan v2.1. The issue enables local attackers to obtain sensitive information via the L1D cache, indicating a potential cache-based information disclosure vulnerability. The connected sources identify the affected product and the general impact but do not provide a deta...

CVE-2023-50559: Undefined Security Weakness

An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache...

CVE-2023-50559

An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache...

RHEL 7 : microcode_ctl (RHSA-2021:3323)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3323 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache...

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

RHEL 7 : microcode_ctl (RHSA-2021:3255)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3255 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543...