CVE-2023-52482

In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too...

CVE-2023-52482 x86/srso: Add SRSO mitigation for Hygon processors

In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too...

CVE-2023-52482 x86/srso: Add SRSO mitigation for Hygon processors

In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too...

CVE-2023-52482

CVE-2023-52482 is a Linux kernel issue where x86 SRSO mitigation was added to address speculative return stack overflow on Hygon processors. The connected Nessus entry for MiracleLinux 9 references kernel commits that implement x86 srso mitigation for Hygon and notes this CVE’s resolution, aligni...

CVE-2023-52482: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too...

CentOS 9 : microcode_ctl-20220809-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20220809-1.el9 build changelog. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of...

Linux kernel security vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from the Hygon processor not adding SRSO mitigations...

PT-2024-8887

Name of the Vulnerable Software and Affected Versions: Intel Xeon Processors versions 3rd Generation through 5th Generation Description: The issue is related to a protection mechanism failure in Intel Xeon Processors, which may allow a privileged user to potentially enable escalation of privilege...

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

Ubuntu: Security Advisory (USN-6652-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202402-22 : intel-microcode: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-22 intel-microcode: Multiple Vulnerabilities - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access. CVE-2021-0127 -...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2022-43552 DESCRIPTION: cURL libcurl is vulnerable to a denial of service, caused ...

USN-6626-2 linux-lowlatency, linux-raspi vulnerabilities

Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-32250, CVE-2023-32252, CVE-2023-32257...

PT-2024-2538

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to non-transparent sharing of return predictor targets between contexts in some IntelR Processors, which may allow an authorized user to potentially enable...

PT-2024-2569

Name of the Vulnerable Software and Affected Versions Intel Xeon D Processors with Intel SGX affected versions not specified Description The issue is related to an incorrect calculation in the microcode keying mechanism for some Intel Xeon D Processors with Intel SGX. This may allow a privileged...

PT-2024-2321

Name of the Vulnerable Software and Affected Versions IntelR AtomR Processors affected versions not specified Description The issue is related to information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors. This may all...

PT-2024-5889

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to a protection mechanism failure of the bus lock regulator for some IntelR Processors, which may allow an unauthenticated user to potentially enable denial of...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD Semiconductor, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in AMD EPYC™ Processors that stems from insufficient data authenticity validation in AGESA, resulting in a...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 server microprocessor product line from AMD Semiconductor, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC™ Processors. The vulnerability can be exploited to write to the SPI flash memory to execute arbitrary cod...