290 matches found
CVE-2018-3639-specter-v4-
CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...
ssbd-tools
Speculative Store Bypass Disable를 실행하기 위한 도구 ssbd-tools 프로젝트는 x86 프로세서에서 제공하는 Speculative Store Bypass DisableSSBD 기능을 사용하는 프로그램 모음입니다. SSBD는 Variant 4로 불리며 CVE-2018-3639가 할당된 Speculative Store Bypass 공격에 대한 프로세서 기반 완화 조치입니다. Linux 커널은 SSBD를 사용하기 위한 프로세스별 제어를 도입했으며, 이 도구들은 해당 제어를 활용하고 정확성을 확인하는 데...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, the patch 2039f26f3aca “bpf: Fixed leakage due to insufficient speculative store bypass mitigation” includes instructions...
CVE-2018-3639
CVE-2018-3639 Linux용 추측적 저장 우회 CVE-2018-3639 개념 증명 다운로드 root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git 빌드 root@kitploit: cd CVE-2018-3639 make 실행 root@kitploit: ./specter 출력 root@kitploit: $ ./spectre idx: 0, highest:P, hitrate:21.340000 idx: 1, highest:A,...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel up to version 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory through a Speculative Store Bypass side-channel attack. This occurs because a certain preempting store operation does not necessarily occur before a store operation whose valu...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel up to version 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory through a Speculative Store Bypass side-channel attack, because the protection mechanism ignores the possibility of uninitialized memory locations within the BPF stack...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021538)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021538 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010867)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010867 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
K000160906: Linux kernel vulnerability CVE-2021-35477
Security Advisory Description In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation tha...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005767 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005692)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005692 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre...
MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.282.b08-1.el7 (AXSA:2021-1294:02)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1294:02 advisory. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are...
MiracleLinux 7 : java-11-openjdk-11.0.10.0.9-0.el7 (AXSA:2021-1297:02)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1297:02 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fixes and Enhancements:...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001565)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001565 advisory. In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attac...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001227)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001227 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001573)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001573 advisory. In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attac...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003908)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003908 advisory. A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disab...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003534)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003534 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003564)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003564 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...
