Stéphane Lesimple
46e662e9a3
enh: clearer CPU details section
2026-04-06 14:59:28 +02:00
Stéphane Lesimple
7ed95384b5
fix: better detect kernel lockdown & no longer require cap_flush_cmd to deem CVE-2018-3615 as mitigated ( fix #296 )
2026-04-06 14:05:21 +02:00
Stéphane Lesimple
435f72de25
feat: implement check for MMIO Stale Data (CVE-2022-21123 CVE-2022-21125 CVE-2022-21166) ( #437 )
2026-04-06 14:05:21 +02:00
Stéphane Lesimple
e4da1b2439
fix: CVE-2019-11135 (TAA) detect new 0x10F MSR for TSX-disabled CPUs ( #414 )
2026-04-06 14:05:21 +02:00
Stéphane Lesimple
36263edc5a
fix: CVE-2020-0543 (SRBDS): microcode mitigation misdetected ( #492 )
2026-04-06 14:05:21 +02:00
Stéphane Lesimple
0e440cbac6
enh: detect IPBP return predictor bypass in Inception/SRSO ("PB-Inception") ( #500 )
...
AMD Zen 1-3 CPUs don't flush return predictions on IBPB, allowing
cross-process Spectre attacks even with IBPB-on-entry active. The kernel
fix (v6.12+, backported) adds RSB fill after IBPB on affected CPUs.
Detect this gap by checking CPUID IBPB_RET bit and kernel ibpb_no_ret
bug flag, and flag systems relying on IBPB without the RSB fill fix.
2026-04-06 14:05:21 +02:00
Stéphane Lesimple
786bc86be8
feat: implement CVE-2023-28746 (RFDS, Register File Data Sampling)
2026-04-06 02:43:34 +02:00
Stéphane Lesimple
4af11551ba
feat: implement CVE-2024-28956 (ITS, Indirect Target Selection) vulnerability and mitigation detection
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
a089ae8cef
fix: sys_interface_check() must set the caller's $msg var ( closes #533 )
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
4718134427
chore: cap_ipred unused for now, make shellcheck happy
2026-04-01 21:37:56 +02:00
Stéphane Lesimple
0628a3e565
enh: vmm detection has been greatly enhanced
...
We also cache the result instead of computing it every time
2026-04-01 21:12:23 +02:00
Stéphane Lesimple
e09d0cf221
enh: check_cpu: look for cap_stibp and cap_autoibrs
2026-04-01 21:12:23 +02:00
Stéphane Lesimple
05e09bb7f4
feat: implement CVE-2024-36350 CVE-2024-36357 (Transient Scheduler Attack)
2026-03-30 23:07:59 +02:00
Stéphane Lesimple
ebc9e91d78
chore: shfmt
2026-03-30 23:07:59 +02:00
Stéphane Lesimple
994608a90a
use MSR names for read_msr for readability
2026-03-30 21:01:13 +02:00
Stéphane Lesimple
3d6acc460e
fix: rework read_msr for values > INT32_MAX ( #507 )
2026-03-30 20:53:13 +02:00
Stéphane Lesimple
cebda01d05
split script in multiple files, reassembled through build.sh
2026-03-30 20:04:16 +02:00
