diff --git a/Dockerfile b/dist/Dockerfile similarity index 100% rename from Dockerfile rename to dist/Dockerfile diff --git a/FAQ.md b/dist/FAQ.md similarity index 100% rename from FAQ.md rename to dist/FAQ.md diff --git a/README.md b/dist/README.md similarity index 100% rename from README.md rename to dist/README.md diff --git a/dist/UNSUPPORTED_CVE_LIST.md b/dist/UNSUPPORTED_CVE_LIST.md new file mode 100644 index 0000000..194b64b --- /dev/null +++ b/dist/UNSUPPORTED_CVE_LIST.md @@ -0,0 +1,21 @@ +# Unsupported CVEs + +This document lists transient execution CVEs that have been evaluated and determined to be **out of scope** for this tool. See the "CVE Inclusion Criteria" section in [DEVELOPMENT.md](DEVELOPMENT.md) for the general policy. + +## CVE-2024-36348 — AMD Transient Scheduler Attack (UMIP bypass) + +**Bulletin:** [AMD-SB-7029](https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html) +**CVSS:** 3.8 (Low) + +A transient execution vulnerability in some AMD processors may allow a user process to speculatively infer CPU configuration registers even when UMIP is enabled. + +**Why out of scope:** AMD has determined that "leakage of CPU Configuration does not result in leakage of sensitive information" and has marked this CVE as "No fix planned" across all affected product lines. No microcode or kernel mitigations have been issued, leaving nothing for this script to check. + +## CVE-2024-36349 — AMD Transient Scheduler Attack (TSC_AUX leak) + +**Bulletin:** [AMD-SB-7029](https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html) +**CVSS:** 3.8 (Low) + +A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled. + +**Why out of scope:** AMD has determined that "leakage of TSC_AUX does not result in leakage of sensitive information" and has marked this CVE as "No fix planned" across all affected product lines. No microcode or kernel mitigations have been issued, leaving nothing for this script to check. diff --git a/docker-compose.yml b/dist/docker-compose.yml similarity index 100% rename from docker-compose.yml rename to dist/docker-compose.yml