ELSA-2018-4144: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2018-1852: kernel security update (MODERATE)

Уязвимость функции Lazy FPU context switching процессоров Intel, позволяющая нарушителю получить доступ к защищаемой информации

Microsoft Guidance for Lazy FP State Restore

Security update for the Linux Kernel

Уязвимость функции оптимизации производительности Lazy FPU context switching процессоров Intel Core, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.

Уязвимость ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Systems with microprocessors utilizing speculative execution and specu ...

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen

Security update for xen