smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii 利用一个非常非常非常非常非常非常长的中断来攻击系统管理模式（SMM）。 概述 事实证明，你可以仅凭一条极其耗时的机器指令，就攻破 SMM——这个在每颗 x86 CPU 后台隐形运行的安全、超特权执行环境。 SMM 要求所有核心要么同时处于 SMM 中，要么同时处于 SMM 外。它的安全模型离不开这一点——当一个线程进入 SMM 时，它会强制所有其他线程也进入 SMM。 要打破这一点，我们只需要一个忙到没注意到自己应该加入 SMM 的核心。 其原理大致如下： root@kitploit: 核心 0 - 开始一条长指令 | | | 核心 1 - 邀请核心...

rosenbridge

project:rosenbridge : x86 CPU의 하드웨어 백도어 github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax 개요 project:rosenbridge는 일부 데스크톱, 랩톱 및 임베디드 x86 프로세서에서 하드웨어 백도어를 공개합니다. 백도어는 링 3사용자 영역 코드가 프로세서 보호를 우회하여 링 0커널 데이터를 자유롭게 읽고 쓸 수 있게 합니다. 백도어는 일반적으로 비활성화되어 있지만활성화하려면 링 0 실행이 필요, 일부 시스템에서는 기본적으로 활성화 ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099970 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resource...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100775 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resource...

SUSE-SU-2026:2238-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. -...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 bsc1243603. CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 bsc1243603. CVE-2025-68310: s390/pci: Use pciueventers in PCI recovery bsc1255160. CVE-2025-71183: btrfs: always detect...

SUSE-SU-2026:2217-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2025-68310: s390/pci: Use pciueventers in PCI recovery bsc1255160. - CVE-2025-71183: btrfs: always detect...

SUSE-SU-2026:21834-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2024-14027: xattr: switch to CLASSfd bsc1259420. - CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50261)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50261 advisory. - xfrm: esp: ipv4: fix up flags setting Greg Kroah-Hartman Orabug: 39344515 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags...

OESA-2026-1418 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...

EUVD-2024-53369

Malicious code in bioql PyPI...

EUVD-2023-12635

Malicious code in bioql PyPI...

EUVD-2025-13068

Malicious code in bioql PyPI...

CVE-2025-37751

The CVE affects the Linux kernel x86 CPU code. It arises from removing the NULL terminator at the end of the AMD erratum table during the switch from x86_cpu_desc to x86_cpu_id, causing readers to read past the end of the array. The fixed behavior is to replace the NULL terminator. Connected sour...

CVE-2025-37751

In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at the end of erratum1386microcode was removed during the switch from x86cpudesc to x86cpuid. This causes readers to run off the end of the arra...

PT-2025-18432 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the x86/cpu component. The issue arises from the removal of the NULL array terminator at the end of erratum 1386...

CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

CVE-2024-56721 x86/CPU/AMD: Terminate the erratum_1386_microcode array

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...