Vulnerability knowledge base

Native BHI (Branch History Injection 2) (CVE-2024-2201)

Published 24/04/2024

A new variant of the previously-disclosed BHI (also known as Spectre v2) vulnerabilities was discovered to affected certain Intel CPUs. The new publication shows that attacks are possible using vectors other than eBPF, leading to...

Gather Data Sampling (GDS) Downfall (CVE-2022-40982)

Published 24/08/2023

It was discovered that some Intel processors were vulnerable to information exposure in certain vector (AVX) operations.

Retbleed and related return predictor microarchitectural flaws (CVE-2022-29901, CVE-2022-28693, CVE-2022-23816, CVE-2022-23825)

Published 12/07/2022

Multiple issues were discovered in AMD and Intel CPUs that result in information disclosure under mitigations for the Spectre Variant 2 vulnerability.

Dirty Pipe – page cache overwrite with pipes flaw in the Linux Kernel (CVE-2022-0847)

Published 10/03/2022

It was discovered that readable files could be overwritten at the page cache level unintentionally or by a malicious actor. That includes files that the process did not have write access to, were immutable or were on read-only filesystems.

Branch History Injection Microarchitectural flaws (CVE-2022-0001, CVE-2022-0002, CVE-2022-23960)

Published 08/03/2022

It was discovered that CPU internals can be abused by an unprivileged process to lead to information disclosure.