Lucene search
K

25 matches found

RedHat Linux
RedHat Linux
added 2025/11/11 9:13 a.m.4 views

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...

5.5CVSS6.9AI score0.00012EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/11/11 8:21 a.m.3 views

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...

5.5CVSS6.9AI score0.00012EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-42331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work XSA-254, one entrypath performs its...

5.5CVSS6AI score0.00056EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/07/30 12:0 a.m.2 views

RockyLinux 8 : kernel-rt (RLSA-2025:3894)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:3894 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of bounds...

7.1CVSS7.6AI score0.01125EPSS
Exploits0References5
OSV
OSV
added 2025/07/29 1:38 p.m.2 views

RLSA-2025:3894 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix o...

7.1CVSS7.6AI score0.01125EPSS
Exploits0References3
OSV
OSV
added 2025/07/16 6:37 a.m.3 views

SUSE-SU-2025:02326-1 Security update for xen

This update for xen fixes the following issues: Security fixes: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 - CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks XSA-466 bsc1234282 - CVE-2025-1713: Fixed deadlock potential with VT-d...

7.5CVSS7.7AI score0.00339EPSS
Exploits0References14
SUSE Linux
SUSE Linux
added 2025/06/10 8:11 a.m.3 views

Security update for xen

This update for xen fixes the following issues: CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks XSA-466 bsc1234282 CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device...

6.8CVSS8AI score0.00249EPSS
Exploits0References12
SUSE Linux
SUSE Linux
added 2025/06/10 1:33 a.m.6 views

Security update for xen

This update for xen fixes the following issues: CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks XSA-466 bsc1234282 CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device...

6.8CVSS8AI score0.00249EPSS
Exploits0References12
OpenVAS
OpenVAS
added 2025/06/04 12:0 a.m.4 views

SUSE: Security Advisory (SUSE-SU-2025:0142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS8AI score0.00012EPSS
Exploits0References5
Xen Project
Xen Project
added 2025/05/12 5:5 p.m.12 views

x86: Indirect Target Selection

ISSUE DESCRIPTION Researchers at VU Amsterdam have released Training Solo, detailing several speculative attacks which bypass current protections. One issue, which Intel have named Indirect Target Selection, is a bug in the hardware support for prediction-domain isolation. The mitigation for this...

5.7CVSS7AI score0.00249EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/04/21 12:0 a.m.10 views

AlmaLinux 8 : kernel-rt (ALSA-2025:3894)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:3894 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of bounds rea...

7.1CVSS7.6AI score0.01125EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/04/15 9:57 a.m.17 views

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.1CVSS7.1AI score0.01125EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/04/15 9:57 a.m.4 views

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...

5.5CVSS6.8AI score0.00012EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/04/15 9:50 a.m.3 views

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...

5.5CVSS6.8AI score0.00012EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/04/15 9:50 a.m.13 views

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.1CVSS7.2AI score0.01125EPSS
Exploits0References3
OSV
OSV
added 2025/04/15 12:0 a.m.10 views

ALSA-2025:3894 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix o...

7.1CVSS7.1AI score0.01125EPSS
Exploits0References6
OSV
OSV
added 2025/04/15 12:0 a.m.13 views

ALSA-2025:3893 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources...

7.1CVSS6.9AI score0.01125EPSS
Exploits0References6
AlmaLinux
AlmaLinux
added 2025/04/15 12:0 a.m.15 views

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix o...

7.1CVSS7.3AI score0.01125EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/01/17 12:0 a.m.9 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xen (SUSE-SU-2025:0142-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0142-1 advisory. - CVE-2024-53241: Xen hypercall page unsafe against speculative attacks bsc1234282. Bug fixes: - Update t...

5.5CVSS7AI score0.00012EPSS
Exploits0References5
OSV
OSV
added 2025/01/16 1:20 p.m.9 views

SUSE-SU-2025:0142-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-53241: Xen hypercall page unsafe against speculative attacks bsc1234282. Bug fixes: - Update to Xen 4.18.4 security bug fix release bsc1027519 x86: Prefer ACPI reboot over UEFI ResetSystem run time service call No other changes mentioned ...

5.5CVSS8.8AI score0.00012EPSS
Exploits0References4
Rows per page
Query Builder