TID-The-Instant-Destroyer

TID — Мгновенный уничтожитель Независимое исследование безопасности в области защиты от атак по побочным каналам на основе кэша. Обзор TID — это специализированный протокол, предназначенный для устранения остатков конфиденциальных данных например, криптографических ключей из кэш-уровней процессор...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC для CVE-2025-29943 Проверка концепции для аппаратной уязвимости StackWarp CVE-2025-29943 в процессорах AMD. Эта ошибка позволяет атакующему с привилегиями администратора на хосте гипервизоре манипулировать конфигурацией конвейера ЦП для повреждения указателя стека внутри гостевой...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2022_6437)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20226437 advisory. Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125...

Astra Linux – Vulnerability in Linux, Linux 5.10

Incomplete cleanup of microarchitectural fill buffers on some Intel processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2026-18796: Information Exposure through Microarchitectural State after Transient Execution

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...

CVE-2026-59130: Non-Transparent Sharing of Microarchitectural Resources

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59131: Non-Transparent Sharing of Microarchitectural Resources

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

SUSE CVE-2023-20593

An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information...

UGen: An Agentic Framework for Generating Microarchitectural Attack PoCs

Microarchitectural attacks continue to evolve, uncovering new exploitation vectors in modern processors. From a defensive perspective, assessing a system's susceptibility to such attacks remains challenging. Developing functional attack implementations is labor-intensive, requires deep...

DEBIAN-CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

ALPINE-CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

UBUNTU-CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads

Affected Products AMD EPYC™ Series Processors AMD EPYC™ 7003 Series Processors AMD EPYC™ 8004 Series Processors AMD EPYC™ 9004 Series Processors AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded Series Processors AMD EPYC™ Embedded 7003 AMD EPYC™ Embedded 8004 AMD EPYC™ Embedded 9004 AMD EPYC™...

MiracleLinux 7 : kernel-3.10.0-1160.76.1.el7 (AXSA:2022-3725:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3725:11 advisory. Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-2112...

MiracleLinux 8 : linux-firmware-20230404-114.git2e92a49f.el8.ML.1 (AXSA:2023-6271:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6271:06 advisory. This package includes firmware files required for some devices to operate. CVE-2023-20593 An issue in Zen 2 CPUs, under specific microarchitectural...

MiracleLinux 7 : microcode_ctl-2.1-47.2.el7 (AXEA:2019-3880:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXEA:2019-3880:01 advisory. - Microarchitectural Store Buffer Data Sampling MSBDS: Store buffers on some microprocessors utilizing speculative execution may allow an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003717 advisory. Microarchitectural Data Sampling Uncacheable Memory MDSUM: Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003575 advisory. Microarchitectural Data Sampling Uncacheable Memory MDSUM: Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user...

MiracleLinux 4 : libvirt-0.10.2-64.1.0.1.AXS4 (AXSA:2019-3887:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3887:01 advisory. Security Fix - Microarchitectural Store Buffer Data Sampling MSBDS: Store Buffer CVE-2018-12126 - Microarchitectural Load Port Data Sampling MLDPDS:...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003143 advisory. Microarchitectural Load Port Data Sampling MLPDS: Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially...