CVE-2023-0045

Contourner les mitigations Spectre-BTI en espace utilisateur sur Linux Ceci est un document de travail, veuillez nous faire part de vos retours si vous pensez que nous avons commis une erreur ou oublié une citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction Lors des tests...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS Локальный DoS ядра Linux, основанный на утечке памяти memleak у непривилегированного пользователя; достаточно сначала выполнить prctl с PRTIMERCREATERESTOREIDSON, согласно https://x.com/spendergrsec/status/1990887509664928062...

CVE-2023-0045

Contournement des mitigations Spectre-BTI de l'espace utilisateur sur Linux Ceci est un document de travail, veuillez nous envoyer vos commentaires si vous pensez que nous avons fait une erreur ou si nous avons oublié une citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introductio...

Astra Linux – Vulnerability in Linux 5.10, Linux

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR in the function speculationctrlupdate, but the IBPB is only issued at the next schedul...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004434 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003885 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002284 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001770 advisory. The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000500 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...

EUVD-2020-3183

Malware in sbrugna...

EUVD-2006-3621

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414330 advisory. The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags...

EUVD-2023-12148

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-10768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled...

SUSE-SU-2025:20361-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2025-4802: elf: Ignore LDLIBRARYPATH and debug env var for setuid for static bsc1243317 - pthreads NPTL: lost wakeup fix 2 bsc1234128, BZ 25847 - Mark functions in libcnonshared.a as hidden bsc1239883 - Linux: Switch back to assembly syscall...

Security update for glibc

This update for glibc fixes the following issues: CVE-2025-4802: elf: Ignore LDLIBRARYPATH and debug env var for setuid for static bsc1243317 pthreads NPTL: lost wakeup fix 2 bsc1234128, BZ 25847 Mark functions in libcnonshared.a as hidden bsc1239883 Linux: Switch back to assembly syscall wrapper...

UBUNTU-CVE-2022-49870

In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior in bit shift for CAPTOMASK Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in...

Linux Distros Unpatched Vulnerability : CVE-2023-0045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information...

Siemens SCALANCE W700 Externally Controlled Reference to a Resource in Another Sphere (CVE-2023-0045)

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR on the function speculationctrlupdate, but the IBPB is only issued on the next schedul...

SUSE CVE-2023-0045

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR on the function speculationctrlupdate, but the IBPB is only issued on the next schedul...