CVE-2023-0045

Linux における Spectre-BTI ユーザー空間緩和策の回避 これは作業中のドキュメントです。誤りがあると思われる場合や引用漏れがある場合は、フィードバックをお送りください。 バージョン 1.0 José Oliveira esoj Rodrigo Branco BSDaemon はじめに Spectre-BTI攻撃の成功率をテストした際、カーネルAPIを緩和策として使用したときに奇妙なパターンを検出しました1。私たちのテストにより、Linuxカーネルが攻撃を正しく緩和できず、syscall後にプロセスが短時間露出したままになることが明らかになりました。...

CVE-2023-0045

Linux에서 Spectre-BTI 사용자 공간 완화 우회하기 이 문서는 작업 중인 문서입니다. 잘못된 점이 있거나 인용을 놓친 경우 피드백을 보내주세요. 버전 1.0 José Oliveira esoj Rodrigo Branco BSDaemon 소개 Spectre-BTI 공격의 성공률을 테스트하던 중, 커널 API를 완화 조치로 사용할 때 이상한 패턴을 발견했습니다1. 테스트 결과, 리눅스 커널이 공격을 제대로 완화하지 못하여 시스템 콜 후 짧은 시간 동안 프로세스가 노출되는 것으로 나타났습니다. 추가 조사 결과, 커널이 시스...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS 非特権ユーザーからのメモリリークに基づくローカルLinuxカーネルDoSです。https://x.com/spendergrsec/status/1990887509664928062 に基づき、最初に PRTIMERCREATERESTOREIDSON prctl を実行するだけで済みます。...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR in the function speculationctrlupdate, but the IBPB is only issued at the next schedul...

CVE-2026-80775

CVE-2026-80775 is a race condition in the Linux kernel futex subsystem, specifically in the initial allocation of mm->futex.phash.ref. The root cause is a concurrent execution scenario introduced by nested vfork : when a vfork child calls vfork again and is killed with SIGKILL, the parent and ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004434 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003885 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002284 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001770 advisory. The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000500 advisory. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. Thi...

EUVD-2020-3183

Malware in sbrugna...

EUVD-2006-3621

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414330 advisory. The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags...

EUVD-2023-12148

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-10768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled...

SUSE-SU-2025:20361-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2025-4802: elf: Ignore LDLIBRARYPATH and debug env var for setuid for static bsc1243317 - pthreads NPTL: lost wakeup fix 2 bsc1234128, BZ 25847 - Mark functions in libcnonshared.a as hidden bsc1239883 - Linux: Switch back to assembly syscall...

Security update for glibc

This update for glibc fixes the following issues: CVE-2025-4802: elf: Ignore LDLIBRARYPATH and debug env var for setuid for static bsc1243317 pthreads NPTL: lost wakeup fix 2 bsc1234128, BZ 25847 Mark functions in libcnonshared.a as hidden bsc1239883 Linux: Switch back to assembly syscall wrapper...

UBUNTU-CVE-2022-49870

In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior in bit shift for CAPTOMASK Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in...

Linux Distros Unpatched Vulnerability : CVE-2023-0045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information...

Siemens SCALANCE W700 Externally Controlled Reference to a Resource in Another Sphere (CVE-2023-0045)

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR on the function speculationctrlupdate, but the IBPB is only issued on the next schedul...