290 matches found
CVE-2018-3639-specter-v4-
CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...
ssbd-tools
用于实践 Speculative Store Bypass Disable 的工具 ssbd-tools 项目是一个程序集合，用于利用 x86 处理器中提供的 Speculative Store Bypass Disable SSBD 功能。SSBD 是一种基于处理器的缓解措施，针对被称为 Variant 4 并分配了 CVE-2018-3639 的 Speculative Store Bypass 攻击。Linux 内核引入了用于使用 SSBD 的每进程控制，这些工具可用于利用这些控制并帮助验证其正确性。 每进程 SSBD 控制 Linux 内核提供了几种不同的操作模式，可以在启动时通...
CVE-2018-3639
CVE-2018-3639 面向 Linux 的投机性存储绕过（CVE-2018-3639）概念验证 下载 root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git 构建 root@kitploit: cd CVE-2018-3639 make 运行 root@kitploit: ./specter 输出 root@kitploit: $ ./spectre idx: 0, highest:P, hitrate:21.340000 idx: 1, highest:A, hitrate:15.5200...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, the patch 2039f26f3aca “bpf: Fixed leakage due to insufficient speculative store bypass mitigation” includes instructions...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel up to version 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory through a Speculative Store Bypass side-channel attack, because the protection mechanism ignores the possibility of uninitialized memory locations within the BPF stack...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel up to version 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory through a Speculative Store Bypass side-channel attack. This occurs because a certain preempting store operation does not necessarily occur before a store operation whose valu...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021538)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021538 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010867)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010867 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
K000160906: Linux kernel vulnerability CVE-2021-35477
Security Advisory Description In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation tha...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005767 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005692)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005692 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.282.b08-1.el7 (AXSA:2021-1294:02)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1294:02 advisory. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are...
MiracleLinux 7 : java-11-openjdk-11.0.10.0.9-0.el7 (AXSA:2021-1297:02)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1297:02 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fixes and Enhancements:...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001565)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001565 advisory. In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attac...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001227)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001227 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001573)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001573 advisory. In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attac...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003908)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003908 advisory. A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disab...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003534)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003534 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003564)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003564 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...
