sandsifter

s a n d s i f t e r : x86 处理器模糊测试器 概述 Sandsifter 通过系统生成机器码来搜索处理器的指令集，并监控执行过程中的异常，从而审计 x86 处理器的隐藏指令和硬件漏洞。Sandsifter 已经发现了来自所有主要厂商的秘密处理器指令；反汇编器、汇编器和模拟器中普遍存在的软件漏洞；企业级虚拟机监控器的缺陷；以及 x86 芯片中的良性及安全关键型硬件漏洞。 鉴于 x86 处理器的多样性，该工具的目标是使用户能够自行检查系统中存在的隐藏指令和漏洞。 要对你的处理器进行基本审计，请运行： root@kitploit: sudo ./sifter.py...

sandsifter

s a n d s i f t e r : x86プロセッサファザー 概要 sandsifterは、プロセッサの命令セットを検索するために機械コードを体系的に生成し、実行中の異常を監視することで、x86プロセッサの隠された命令やハードウェアバグを監査します。sandsifterは、すべての主要ベンダーから秘密のプロセッサ命令を発見しました。また、逆アセンブラ、アセンブラ、エミュレータにおける広範なソフトウェアバグ、エンタープライズハイパーバイザの欠陥、そしてx86チップにおける良性およびセキュリティ上重要なハードウェアバグの両方を明らかにしました。...

ssbd-tools

用于实践 Speculative Store Bypass Disable 的工具 ssbd-tools 项目是一个程序集合，用于利用 x86 处理器中提供的 Speculative Store Bypass Disable SSBD 功能。SSBD 是一种基于处理器的缓解措施，针对被称为 Variant 4 并分配了 CVE-2018-3639 的 Speculative Store Bypass 攻击。Linux 内核引入了用于使用 SSBD 的每进程控制，这些工具可用于利用这些控制并帮助验证其正确性。 每进程 SSBD 控制 Linux 内核提供了几种不同的操作模式，可以在启动时通...

SUSE CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

SUSE CVE-2024-44948

In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate capability bit in the...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497 erofs: fix lz4 inplace decompression

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

kernel security and bug fix update

3.10.0-862.6.3.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-862.6.3 - x86 always enable eager FPU by default on non-AMD processors Paolo...

SMM "Incursion" Attack

Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...

CentOS Update for kernel CESA-2011:1065 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for kernel RHSA-2011:1163-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2011:1163-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for Red Hat Enterprise Linux 5.7 kernel RHSA-2011:1065-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...