Stéphane Lesimple
8a302b56e6
feat: add ARM64 silicon errata checks (issue #357 )
...
Add detection for three speculation/security-relevant ARM64 errata
families that are tracked by vendor erratum IDs rather than CVEs: Speculative
AT TLB corruption (1165522/1319367/1319537/1530923), speculative unprivileged
load (2966298/3117295), and MSR SSBS not self-synchronizing (3194386 and
siblings). Reserves a new CVE-0001-NNNN placeholder range for vendor errata
and adds a --errata <number> selector alongside --variant/--cve.
CPU affection is determined per-core from (implementer, part, variant,
revision) tuples read from /proc/cpuinfo, matching the kernel's MIDR ranges
(including Kryo4xx Silver for erratum 1530923). Kernel mitigation detection
uses the erratum-specific CONFIG_ARM64_ERRATUM_NNNN symbols, kernel image
descriptor strings, and dmesg output (no sysfs for these)
2026-04-21 08:33:50 +02:00
林博仁 Buo-ren Lin
8a417e5579
doc: readme: correct markdown indentation for unordered list items ( #569 )
...
Signed-off-by: 林博仁(Buo-ren Lin) <buo.ren.lin@gmail.com >
2026-04-20 18:03:37 +02:00
Stéphane Lesimple
b7a6182a65
doc: add Jump Conditional Code (JCC) Erratum to the unsupported list
2026-04-20 17:47:50 +02:00
Stéphane Lesimple
e2d110a3b5
doc: update output formats doc + normalize json to bool
2026-04-20 12:55:34 +02:00
Stéphane Lesimple
6732eb141b
doc: CVE-2018-3665 (Lazy FP State Restore (LazyFP)), unsupported
2026-04-19 12:49:17 +02:00
Stéphane Lesimple
048ce5b6a2
enh: add FPDSS check for AMD Zen1/Zen+ (CVE-2025-54505)
2026-04-18 17:18:42 +02:00
Stéphane Lesimple
e67c9e4265
enh: use g_mode to explicitly save/load the current running mode
2026-04-10 19:28:10 +02:00
Stéphane Lesimple
ff42393fa6
new batch mode docs, add doc/ to -build branch
2026-04-08 22:58:36 +02:00
Stéphane Lesimple
df3c2aeaa3
add screenshot to README
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
60ea669e41
enh: better explain the 4 run modes
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
b0bb1f4676
feat: implement check for MMIO Stale Data (CVE-2022-21123 CVE-2022-21125 CVE-2022-21166) ( #437 )
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
3d01978cd4
feat: add CVE-2023-20588 (AMD DIV0 bug) ( #473 )
2026-04-08 22:35:53 +02:00
Stéphane Lesimple
2ed15da028
feat: implement CVE-2023-28746 (RFDS, Register File Data Sampling)
2026-04-08 22:35:52 +02:00
Stéphane Lesimple
5dc9c3c18d
chore: reorder CVE list in README.md
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
a00fab131f
feat: implement CVE-2025-40300 (VMScape) and CVE-2024-45332 (BTI)
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
4af11551ba
feat: implement CVE-2024-28956 (ITS, Indirect Target Selection) vulnerability and mitigation detection
2026-04-04 16:07:12 +00:00
Stéphane Lesimple
ed6a0a2882
doc: unsupported CVE list
2026-04-02 22:51:55 +02:00
Stéphane Lesimple
4f6dbb36c8
feat: implement Retbleed (CVE-2022-29900 CVE-2022-29901) mitigation detection
2026-04-02 22:33:48 +02:00
Stéphane Lesimple
b32f05b8d2
chore: readme: add a second table one about impact/mitigation, rework sections
2026-04-01 00:21:35 +02:00
Stéphane Lesimple
eabddf3d72
update dev docs and refactor CVE list in readme
2026-03-30 23:35:48 +02:00
Stéphane Lesimple
a0032a44ef
chore: adjust workflow for dev-build
2026-03-30 23:07:59 +02:00
Stéphane Lesimple
6eb70ab52d
chore: move dist files to the dist/ subdir
2026-03-30 23:07:59 +02:00
