33 matches found
EUVD-2026-91848
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...
CVE-2026-105051
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...
CVE-2026-105051
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...
CVE-2026-105051
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...
CVE-2026-105051
Versions of Denuvo Anti-Tamper released through 2026-03-04 are vulnerable to a bypass of a hypervisor presence check . The root cause is CPUID interception involving specific system files: SimpleSvm.sys on AMD systems, and hyperkd.sys or hyperhv.dll on Intel systems. This vulnerability allows for...
PT-2026-104454
Name of the Vulnerable Software and Affected Versions Denuvo Anti-Tamper versions prior to 2026-03-04 Description The software allows a bypass of the hypervisor presence check. This is achieved through CPUID interception, affecting SimpleSvm.sys on AMD systems and hyperkd.sys and hyperhv.dll on...
CVE-2026-105051: Use of Less Trusted Source
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
A flaw was found in golang.org/x/crypto/ssh. The Verify method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially...
CVE-2026-53142
In the Linux kernel, the following vulnerability has been resolved: drm/xe/display: fix oops in suspend/shutdown without display The xe driver keeps track of whether to probe display, and whether display hardware is there, using xe-info.probedisplay. It gets set to false if there's no display aft...
EUVD-2022-55720
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...
CVE-2022-50636 PCI: Fix pci_device_is_present() for VFs by checking PF
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986855)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986855 advisory. In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the s390/sclp module not handling the NULL case before the SCCB presence check...
Linux Distros Unpatched Vulnerability : CVE-2017-15612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink...
Linux Distros Unpatched Vulnerability : CVE-2021-22233
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details CVE-2021-22233 Note that Nessus relies on t...
CVE-2021-38299
Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to login to a vulnerable service using an attached FIDO2 authenticator without passing a check of the user presence...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46679)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46679 advisory. - In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when...
CVE-2024-46679
In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...
CVE-2024-46679
CVE-2024-46679 (Linux kernel) : A race between sysfs reading of ethtool link settings and device removal can read state when the device is not present, causing a crash. The fix moves a device-presence check into ethtool (and related callers) to ensure link settings are only shown when the device ...
CVE-2024-46679 ethtool: check device is present when getting link settings
In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...