Lucene search
K

107 matches found

OSV
OSV
added 2026/04/27 6:33 p.m.2 views

JLSEC-2026-245 Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that...

Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC...

6.5CVSS7.3AI score0.03331EPSS
Exploits0References16
Amd
Amd
added 2026/04/17 12:0 a.m.2 views

Floating Point Value Injection (FPVI) Variant in AMD CPUs

Summary Researchers shared with AMD a report titled “TREVEX: A Black-Box Detection Framework For Data-Flow Transient Execution Vulnerabilities.” The researchers' paper introduced a Floating-Point Value Injection FPVI variant, which could allow an attacker with a deep understanding of...

5.5CVSS6.1AI score0.00093EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003572 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...

4.4CVSS6.4AI score0.00079EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003656 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...

4.4CVSS6.4AI score0.00079EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003700 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the...

4.4CVSS6.4AI score0.00051EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003653)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003653 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the...

4.4CVSS6.4AI score0.00051EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.5 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000277 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the...

4.4CVSS6.4AI score0.00051EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000469 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...

4.4CVSS6.4AI score0.00079EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-6118

Malware in sbrugna...

4.4CVSS6.8AI score0.00051EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-6117

Malware in sbrugna...

4.4CVSS6.5AI score0.00079EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-17018

Malicious code in bioql PyPI...

5.6CVSS6.3AI score0.00255EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/09/16 11:24 p.m.1 views

SUSE CVE-2025-39804

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts Restore the SIMD usability check that was removed by commit a59e5468a921 "crypto: arm64/poly1305 - Add block-only interface". This safety check is cheap and ...

7.8CVSS6.8AI score0.00026EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-6129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on Power...

6.5CVSS6.8AI score0.03331EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/07/15 7:20 a.m.2 views

glibc: Vector register overwrite bug in glibc

A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...

5.6CVSS7.3AI score0.00291EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/06/30 2:51 a.m.2 views

glibc: Vector register overwrite bug in glibc

A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...

5.6CVSS7.3AI score0.00291EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2025/06/07 1:59 a.m.1 views

SUSE CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

7.4CVSS7AI score0.00291EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/06/07 1:59 a.m.1 views

SUSE CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

7.4CVSS7AI score0.00255EPSS
Exploits0References3
OSV
OSV
added 2025/06/05 8:15 p.m.0 views

UBUNTU-CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS5.8AI score0.00255EPSS
Exploits0References4
CVE
CVE
added 2025/06/05 7:20 p.m.58 views

CVE-2025-5745

CVE-2025-5745 concerns the GNU C Library (glibc) 2.40 and later, where the Power10-optimized strcmp/strncmp implementation writes to non-volatile vector registers v20–v31 without saving caller contents (per powerpc64le ABI). This can overwrite the caller’s registers, potentially changing control ...

5.6CVSS7AI score0.00255EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/06/05 7:15 p.m.2 views

DEBIAN-CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS6.5AI score0.00291EPSS
Exploits0References1
Rows per page
Query Builder