8 Commits

Include renames

Author	SHA1	Message	Date
Stéphane Lesimple	ea33890c84	fix: zenbleed (CVE-2023-20593) handle the VM guest case (#488) ... Zenbleed (CVE-2023-20593) is mitigated either by up-to-date CPU microcode or by the host kernel setting FP_BACKUP_FIX (DE_CFG MSR 0xc0011029 bit 9). Both are applied at the host level. Inside a Xen dom0/domU (or any VM guest) the script can't read that MSR and can't trust the microcode version the hypervisor presents, so it wrongly concluded "kernel too old + microcode not fixed" and reported VULN even though the host had applied the microcode fix (passing on bare metal). In live mode, when the verdict would be VULN and we're running as a guest, report UNK instead, explaining the mitigation is host-level and not observable from inside the guest. Bare metal is unchanged (still VULN), offline analysis is unchanged, and a guest with positively-confirmed fixed microcode still reports OK. (cherry picked from commit 0b022ee253)	2026-08-08 17:23:47 +00:00
Stéphane Lesimple	e67c9e4265	enh: use g_mode to explicitly save/load the current running mode	2026-04-10 19:28:10 +02:00
Stéphane Lesimple	b9c203120b	enh: --no-runtime and --no-hw modes replacing --live and implicit 'offline' mode	2026-04-08 22:35:53 +02:00
Stéphane Lesimple	3ea8e213ec	chore: add proper header to all src/vulns/* files	2026-04-02 21:03:29 +02:00
Stéphane Lesimple	d05601ed3f	feat: add CVE-2023-20593 (Zenbleed) mitigation detection for BSD	2026-04-01 21:12:23 +02:00
Stéphane Lesimple	ebc9e91d78	chore: shfmt	2026-03-30 23:07:59 +02:00
Stéphane Lesimple	3d6acc460e	fix: rework read_msr for values > INT32_MAX (#507)	2026-03-30 20:53:13 +02:00
Stéphane Lesimple	cebda01d05	split script in multiple files, reassembled through build.sh	2026-03-30 20:04:16 +02:00