Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Eliminated the possibility of speculative memory reading. The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Therefore, this is a user-controlled value. Under certain...

CVE-2026-74466

A flaw was found in the Linux kernel's s390/zcrypt component. Under specific conditions, a user-controlled domain value, derived from CCA or EP11 ioctl structures, is used as an array index without a proper speculation barrier. This oversight could allow for speculative memory reads, potentially...

CVE-2024-36315

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality...

UBUNTU-CVE-2024-36315

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality...

CVE-2024-36315: Protection Mechanism Failure

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality...

AMD多款产品 安全漏洞

AMD EPYC is a high-performance server processor developed by American semiconductor company AMD. Several AMD products have security vulnerabilities. These vulnerabilities stem from improper execution of the LFENCE serialization attribute, which may allow attackers to bypass the speculation barrie...

CVE-2021-47277

CVE-2021-47277 affects the Linux kernel KVM path for guest memory translation. The issue arises when speculative execution may use an invalid guest frame number (gfn) to compute an out-of-bounds host virtual address (hva) in __gfn_to_hva_memslot, enabling a potential two-read Spectre gadget where...