566 matches found
AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions
...
KB5020003: Windows Server 2012 Security Update (November 2022)
The remote Windows host is missing security update 5020003. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...
Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-185 advisory. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by creating a confidential guest V...
hw: cpu: AMD: Branch Type Confusion (non-retbleed)
A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure...
hw: cpu: AMD: Branch Type Confusion (non-retbleed)
A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure...
hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions
A flaw was found in hw. Non-transparent sharing of branch predictor targets between contexts in some IntelR processors may potentially allow an authorized user to enable information disclosure via local access...
AlmaLinux 8 : kernel-rt (ALSA-2022:7134)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7134 advisory. - A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attack...
Oracle Linux 8 : kernel (ELSA-2022-7110)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7110 advisory. - debug: lockdown kgdb Orabug: 34270802 CVE-2022-21499 - intelidle: Fix false positive RCU splats due to incorrect hardirqs state Waiman Long 2103167...
hw: cpu: AMD: Branch Type Confusion (non-retbleed)
A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure...
hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions
A flaw was found in hw. Non-transparent sharing of branch predictor targets between contexts in some IntelR processors may potentially allow an authorized user to enable information disclosure via local access...
hw: cpu: AMD: Branch Type Confusion (non-retbleed)
A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure...
hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions
A flaw was found in hw. Non-transparent sharing of branch predictor targets between contexts in some IntelR processors may potentially allow an authorized user to enable information disclosure via local access...
Ubuntu 18.04 LTS : Linux kernel (AWS) vulnerabilities (USN-5682-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5682-1 advisory. It was discovered that the BPF verifier in the Linux kernel did not properly handle internal data structures. A local attacker could use this to expose...
OESA-2022-1942 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2022-26373 A heap-based buffer overflow...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the putdevice down a bit to avoid the use after free. wsa: added comment to the code, added Fixes...
OESA-2022-1871 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2022-26373 A use-after-free flaw was...
OESA-2022-1864 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2022-26373 A use-after-free flaw was...
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2022-006)
The version of kernel installed on the remote host is prior to 5.15.57-29.131. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2022-006 advisory. A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary...
