Lucene search
K

18 matches found

RedHat Linux
RedHat Linux
added 2025/07/01 7:48 p.m.5 views

microcode_ctl: From CVEorg collector

A flaw was found in the Branch Prediction Unit BPU of Intel's Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier IBPB protections. By employing branch predictor training techniques as described in the "Training Solo" publication, an attacker with loca...

6.8CVSS6.4AI score0.0016EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/01 6:51 p.m.4 views

microcode_ctl: From CVEorg collector

A flaw was found in the Branch Prediction Unit BPU of Intel's Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier IBPB protections. By employing branch predictor training techniques as described in the "Training Solo" publication, an attacker with loca...

6.8CVSS6.4AI score0.0016EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/01 3:49 p.m.5 views

microcode_ctl: From CVEorg collector

A flaw was found in the Branch Prediction Unit BPU of Intel's Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier IBPB protections. By employing branch predictor training techniques as described in the "Training Solo" publication, an attacker with loca...

6.8CVSS6.4AI score0.0016EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/01 3:39 p.m.5 views

microcode_ctl: From CVEorg collector

A flaw was found in the Branch Prediction Unit BPU of Intel's Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier IBPB protections. By employing branch predictor training techniques as described in the "Training Solo" publication, an attacker with loca...

6.8CVSS6.4AI score0.0016EPSS
Exploits0References6
Packet Storm News
Packet Storm News
added 2025/06/08 12:0 a.m.5 views

Exploiting Inaccurate Branch History in Side-Channel Attacks

Modern out-of-order CPUs heavily rely on speculative execution for performance optimization, with branch prediction serving as a cornerstone to minimize stalls and maximize efficiency. Whenever shared branch prediction resources lack proper isolation and sanitization methods, they may originate...

7.2AI score
Exploits0
SUSE Linux
SUSE Linux
added 2025/05/29 9:40 a.m.1 views

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated user...

6.8CVSS7.2AI score0.00347EPSS
Exploits0References18
OSV
OSV
added 2025/05/29 9:40 a.m.1 views

SUSE-SU-2025:01651-2 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated us...

6.8CVSS6.9AI score0.00347EPSS
Exploits0References10
OSV
OSV
added 2025/05/22 8:52 a.m.2 views

SUSE-SU-2025:01651-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated us...

6.8CVSS6.9AI score0.00347EPSS
Exploits0References10
SUSE CVE
SUSE CVE
added 2025/05/13 11:41 p.m.2 views

SUSE CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Coretm Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.6CVSS5.6AI score0.0016EPSS
Exploits0References12
OSV
OSV
added 2025/05/13 9:16 p.m.2 views

ALPINE-CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.8CVSS5.9AI score0.0016EPSS
Exploits0References1
OSV
OSV
added 2025/05/13 9:16 p.m.5 views

CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.1AI score
Exploits0References1
OSV
OSV
added 2025/05/13 9:16 p.m.0 views

UBUNTU-CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.8CVSS6.7AI score0.0016EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/05/13 9:2 p.m.7 views

CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.8CVSS6.6AI score0.0016EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2025/05/13 9:2 p.m.5 views

CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.8CVSS6.3AI score0.0016EPSS
Exploits0
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.1 views

Intel Core Ultra Processors 安全漏洞

Intel Core Ultra Processors is a Core series central processing unit CPU from Intel Corporation USA. A security vulnerability exists in Intel Core Ultra Processors that stems from improper initialization of branch prediction unit resources, which could lead to information disclosure...

6.8CVSS5.5AI score0.0016EPSS
Exploits0References1
OSV
OSV
added 2020/07/28 12:0 a.m.3 views

OSV-2020-1444 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22678 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

7.2AI score
Exploits0
OSV
OSV
added 2020/07/22 9:49 p.m.13 views

OSV-2020-1226 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13583 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

7.2AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2020/04/05 11:5 a.m.27 views

CVE-2018-9056

BranchScope is a new class of attack which leverages functioning of the Branch Prediction Unit BPU of a processor to infer/leak sensitive process information, which is involved in the branch decision making if x x ^ y; else x & y;. In this, BranchScope side-channel could help to infer 'x', by...

5.6CVSS0.2AI score0.00696EPSS
Exploits1References2
Rows per page
Query Builder