Linux Kernel could allow a local attacker to execute arbitrary code on ...

Security update for xen

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

ELSA-2022-9583: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9582: Unbreakable Enterprise kernel-container security update (IMPORTANT)

Уязвимость микропрограммного обеспечения процессоров Intel и AMD, позволяющая нарушителю раскрыть защищаемую информацию из памяти ядра или осуществить атаку на хост-систему из виртуальных машин

Уязвимость функции bad_flp_intr ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Security update for the Linux Kernel

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for the Linux Kernel (Live Patch 29 for SLE 15)

Security update for the Linux Kernel (Live Patch 27 for SLE 15)