Описание
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| linux | fixed | 6.8.9-1 | package | |
| xen | fixed | 4.19.0+14-g0918434e0f-1~exp1 | experimental | package |
| xen | fixed | 4.19.1-1 | package | |
| xen | end-of-life | bullseye | package | |
| xen | end-of-life | buster | package |
Примечания
https://vusec.net/projects/native-bhi
https://download.vusec.net/papers/inspectre_sec24.pdf
https://xenbits.xen.org/xsa/advisory-456.html
EPSS
Связанные уязвимости
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.
EPSS