1147 matches found
kernel: x86: fix user address masking non-canonical speculation issue
In the Linux kernel, the following vulnerability has been resolved: x86: fix user address masking non-canonical speculation issue It turns out that AMD has a "Meltdown Litetm" issue with non-canonical accesses in kernel space. And so using just the high bit to decide whether an access is in user...
Linux Distros Unpatched Vulnerability : CVE-2025-38518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h h...
Linux Distros Unpatched Vulnerability : CVE-2022-2235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1....
CVE-2025-38518
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
CVE-2025-9103 ZenCart CKEditor cross site scripting
A vulnerability was detected in ZenCart 2.1.0. Affected by this vulnerability is an unknown functionality of the component CKEditor. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existenc...
Zen Ventures Zen Cart 安全漏洞
Zen Ventures Zen Cart is a platform for building online shopping carts from Zen Ventures, USA. A security vulnerability exists in Zen Ventures Zen Cart version 2.1.0, which stems from insufficient input filtering by the component CKEditor, leading to a remotely exploitable cross-site scripting...
SUSE CVE-2025-38518
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
CVE-2025-38518
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
CVE-2025-38518
CVE-2025-38518 concerns the Linux kernel: on Zen2-class AMD CPUs, the INVLPGB flag is disabled in the kernel to prevent system oopses/panics during TLB flush. The root cause is a misreported CPUID INVLPGB bit by AMD Cyan Skillfish (Family 17h, Model 47h, Stepping 0h). The mitigation across connec...
CVE-2025-38518 x86/CPU/AMD: Disable INVLPGB on Zen2
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
CVE-2025-38518 x86/CPU/AMD: Disable INVLPGB on Zen2
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
CVE-2025-38518
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
CVE-2025-38518
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to disable INVLPGB on Zen2, which could lead to a system crash...
PT-2025-33561 · Amd +1 · Amd Cyan Skillfish +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue related to the handling of TLB flushes using INVLPGB on AMD Cyan Skillfish processors Family 17h, Model 47h, Stepping 0h. This can lead to system...
Malicious code in mirage-ctuaz-u2y7d-zen-project (npm)
The package mirage-ctuaz-u2y7d-zen-project was found to contain malicious code...
MAL-2025-40799 Malicious code in zen-1i7nw-ivlqb-glow-project (npm)
The package zen-1i7nw-ivlqb-glow-project was found to contain malicious code...
MAL-2025-40807 Malicious code in zen_rsows_0pd22_mirage (npm)
The package zenrsows0pd22mirage was found to contain malicious code...