107 matches found
JLSEC-2026-245 Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that...
Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC...
Floating Point Value Injection (FPVI) Variant in AMD CPUs
Summary Researchers shared with AMD a report titled “TREVEX: A Black-Box Detection Framework For Data-Flow Transient Execution Vulnerabilities.” The researchers' paper introduced a Floating-Point Value Injection FPVI variant, which could allow an attacker with a deep understanding of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003572)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003572 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003656)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003656 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003700)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003700 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003653)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003653 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000277)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000277 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000469)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000469 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...
EUVD-2019-6118
Malware in sbrugna...
EUVD-2019-6117
Malware in sbrugna...
EUVD-2025-17018
Malicious code in bioql PyPI...
SUSE CVE-2025-39804
In the Linux kernel, the following vulnerability has been resolved: lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts Restore the SIMD usability check that was removed by commit a59e5468a921 "crypto: arm64/poly1305 - Add block-only interface". This safety check is cheap and ...
Linux Distros Unpatched Vulnerability : CVE-2023-6129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on Power...
glibc: Vector register overwrite bug in glibc
A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...
glibc: Vector register overwrite bug in glibc
A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...
SUSE CVE-2025-5702
The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...
SUSE CVE-2025-5745
The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...
UBUNTU-CVE-2025-5745
The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...
CVE-2025-5745
CVE-2025-5745 concerns the GNU C Library (glibc) 2.40 and later, where the Power10-optimized strcmp/strncmp implementation writes to non-volatile vector registers v20–v31 without saving caller contents (per powerpc64le ABI). This can overwrite the caller’s registers, potentially changing control ...
DEBIAN-CVE-2025-5702
The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...