PT-2023-14101

CVE-2022-42331

·

تاريخ النشر

2023-03-21

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions x86 (affected versions not specified)
Description The issue is related to a speculative vulnerability in the 32bit SYSCALL path. Due to an oversight in the original Spectre/Meltdown security work, one entry path performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
DSA-5378-1
OPENSUSE-SU-2024:12833-1
SUSE-SU-2023:0845-1
SUSE-SU-2023_0845-1
SUSE-SU-2023:0846-1
SUSE-SU-2023_0846-1
SUSE-SU-2023:0847-1
SUSE-SU-2023_0847-1
SUSE-SU-2023:0848-1
SUSE-SU-2023_0848-1
SUSE-SU-2023:0848-2
SUSE-SU-2023:0858-1
SUSE-SU-2023_0858-1
SUSE-SU-2023:0859-1
SUSE-SU-2023_0859-1
SUSE-SU-2023:0862-1
SUSE-SU-2023_0862-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾