Commit Graph

Select branches

Hide Pull Requests

master

source

source-build

test

test-build

vuln-watch

#1

#10

#100

#100

#101

#102

#102

#106

#107

#108

#11

#112

#116

#12

#121

#131

#136

#137

#137

#14

#14

#140

#141

#141

#142

#15

#15

#154

#16

#167

#174

#176

#176

#177

#18

#184

#187

#19

#192

#195

#199

#199

#2

#2

#200

#201

#202

#203

#204

#204

#209

#213

#213

#216

#222

#226

#227

#23

#230

#232

#232

#237

#239

#24

#242

#242

#243

#244

#245

#246

#25

#251

#252

#253

#259

#26

#262

#264

#265

#266

#268

#270

#271

#272

#276

#277

#280

#282

#285

#287

#290

#295

#299

#3

#300

#305

#306

#31

#312

#318

#319

#32

#323

#324

#325

#326

#327

#328

#33

#33

#332

#333

#334

#338

#345

#346

#352

#355

#358

#359

#361

#362

#363

#364

#365

#366

#367

#368

#37

#375

#377

#38

#380

#381

#382

#383

#386

#39

#391

#396

#397

#4

#401

#402

#403

#404

#405

#406

#407

#408

#41

#415

#417

#418

#42

#421

#422

#423

#424

#425

#426

#427

#431

#434

#435

#435

#436

#44

#441

#442

#444

#445

#446

#447

#448

#448

#449

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#460

#461

#462

#463

#467

#468

#469

#47

#470

#471

#479

#479

#48

#481

#483

#484

#487

#494

#495

#497

#498

#5

#50

#504

#506

#51

#511

#512

#513

#514

#515

#516

#517

#518

#521

#522

#523

#524

#526

#527

#528

#529

#53

#530

#531

#532

#534

#536

#537

#538

#539

#54

#540

#55

#557

#558

#559

#560

#561

#562

#563

#564

#565

#566

#567

#569

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#580

#581

#583

#584

#585

#586

#587

#588

#589

#590

#60

#61

#63

#63

#7

#71

#72

#73

#75

#75

#76

#76

#77

#79

#8

#80

#84

#85

#9

#9

#93

#93

v0.01

v0.02

v0.03

v0.04

v0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.12

v0.13

v0.14

v0.15

v0.16

v0.17

v0.18

v0.19

v0.20

v0.21

v0.22

v0.23

v0.24

v0.25

v0.26

v0.27

v0.28

v0.29

v0.30

v0.31

v0.32

v0.33

v0.34

v0.35

v0.36

v0.37

v0.38

v0.39

v0.40

v0.41

v0.42

v0.43

v0.44

v0.45

v0.46

v26.21.0401891

v26.26.0404682

v26.33.0420460

v26.36.0602723

v26.36.0913490

Mono Color

• 0af4830224 fix: is_ucode_blacklisted: fix some model names Stéphane Lesimple 2022-03-20 11:35:39 +01:00
• 81a4329d71 feat: add --cpu, apply changes to (read|write)_msr, update fwdb to v221+i20220208 Stéphane Lesimple 2022-03-20 11:04:57 +01:00
• 3679776f3c chore: only attempt to load msr and cpuid module once Stéphane Lesimple 2022-03-20 00:55:49 +01:00
• ba131fcd2f chore: read_cpuid: use named constants Stéphane Lesimple 2022-03-20 00:08:17 +01:00
• ae6bc31c2c feat: hw check: add IPRED, RRSBA, BHI features check Stéphane Lesimple 2022-03-19 18:39:44 +01:00
• 6d7a6b3666 feat: add subleaf != 0 support for read_cpuid Stéphane Lesimple 2022-03-19 18:39:10 +01:00
• 16f2160be5 chore: fwdb: update to v220+i20220208 Stéphane Lesimple 2022-03-17 19:36:44 +01:00
• 7cad9301b3 typo Aditya-Tolikar 2022-02-20 18:42:47 +05:30
• 580549812a fix: retpoline: detection on 5.15.28+ (#420) Stéphane Lesimple 2022-03-17 19:14:32 +01:00
• a485c7882a doc: readme: make the FAQ entry more visible Stéphane Lesimple 2021-05-25 13:22:08 +02:00
• 7d13f7a0ef doc: add an FAQ entry about CVE support Stéphane Lesimple 2021-05-25 13:11:47 +02:00
• 226b2375ab chore: speculative execution -> transient execution Stéphane Lesimple 2021-05-25 12:39:51 +02:00
• 052a3e66d1 doc: more FAQ and README Stéphane Lesimple 2021-05-25 12:23:06 +02:00
• 05d862709d fix: has_vmm false positive with pcp Stéphane Lesimple 2021-05-25 08:14:22 +02:00
• 3846913899 fix: refuse to run under MacOS and ESXi Stéphane Lesimple 2021-05-24 22:39:47 +02:00
• a87ace1f98 doc: add an FAQ.md and update the README.md accordingly Stéphane Lesimple 2021-05-24 20:15:32 +02:00
• 0ba71a443e fix: mcedb: v191 changed the MCE table format Stéphane Lesimple 2021-05-24 12:49:25 +02:00
• 3a486e9985 arm64: variant 4: detect ssbd mitigation from kernel img, system.map or kconfig Stéphane Lesimple 2020-06-06 18:27:29 +02:00
• 23564cda5d fix: variant4: added case where prctl ssbd status is tagged as 'unknown' Stéphane Lesimple 2020-06-06 17:39:07 +02:00
• 0ea21d09bd fix: extract_kernel: don't overwrite kernel_err if already set Stéphane Lesimple 2021-03-24 21:45:08 +01:00
• 08e30e156d chore: readme: framapic is gone, host the screenshots on GitHub Stéphane Lesimple 2021-02-22 21:20:37 +01:00
• 6d35e780f4 arm64: phytium: Add CPU Implementer Phytium Zhiyuan Dai 2020-12-30 17:16:40 +08:00
• 4ec3154be0 chore: replace 'Vulnerable to' by 'Affected by' in the hw section Stéphane Lesimple 2020-11-10 18:52:54 +01:00
• 843f26630d feat: arm: add Cortex A77 and Neoverse-N1 (fixes #371) Stéphane Lesimple 2020-11-09 18:54:01 +01:00
• 7fc2ec65b9 bump to v0.44 v0.44 Stéphane Lesimple 2020-11-09 18:39:46 +01:00
• c8cdfd54da chore: fwdb: update to v165.20201021+i20200616 Stéphane Lesimple 2020-11-08 21:01:33 +01:00
• f0c33c7a32 fix: fwdb: use the commit date as the intel fwdb version Stéphane Lesimple 2020-11-08 21:00:32 +01:00
• 9e874397da chore: fwdb: update to v163.20200930+i20200904 Stéphane Lesimple 2020-10-05 20:01:31 +02:00
• 76cb73f3cb fix: fwdb: update Intel's repository URL Stéphane Lesimple 2020-10-05 20:01:01 +02:00
• 90f23d286e chore: update fwdb to v160.20200912+i20200722 Stéphane Lesimple 2020-09-14 21:45:09 +02:00
• e41e311a7f feat: add zstd kernel decompression (#370) Stéphane Lesimple 2020-09-14 21:29:33 +02:00
• 1f75f01630 fwdb: update MCEdb to v148 & Intel firmwares to 2020-04-27 Stéphane Lesimple 2020-06-10 00:16:21 +02:00
• 14a53b19da chore: add CVE to the README Stéphane Lesimple 2020-06-10 00:03:56 +02:00
• d8f0ddd7a5 chore: fix indentation Stéphane Lesimple 2020-06-09 22:43:36 +02:00
• 62d3448a54 Added support for SRBDS related vulnerabilities Agata Gruza 2020-04-16 03:59:28 -07:00
• cb6d139629 chore: tests: now expect 15 CVEs instead of 14 (fix) Stéphane Lesimple 2020-06-09 22:55:25 +02:00
• 7e2db09ed9 chore: tests: now expect 15 CVEs instead of 14 Stéphane Lesimple 2020-06-09 22:50:48 +02:00
• 33cf1cde79 enh: arm: add experimental support for binary arm images Stéphane Lesimple 2019-11-24 22:45:38 +01:00
• 4a3006e196 fix: arm64: cve-2017-5753: kernels 4.19+ use a different nospec macro Stéphane Lesimple 2019-11-23 18:01:36 +01:00
• 36f98eff95 fwdb: update MCEdb to v147 & Intel firmwares to 2020-04-27 Stéphane Lesimple 2020-05-31 12:55:59 +02:00
• fa7b8f9567 Typo xaitax 2020-04-03 10:19:25 +02:00
• 3beefc2587 enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode Stéphane Lesimple 2020-03-10 22:13:55 +01:00
• 27c36fdb80 fwdb: update to v135.20200303+i20200205 Stéphane Lesimple 2020-03-10 22:17:22 +01:00
• 3d21dae168 Fixes for FreeBSD to parse CPU info. Matt Christian 2020-02-06 19:54:27 +01:00
• 7d2a510146 chore: update fwdb to v132.20200108+i20191124 Stéphane Lesimple 2020-02-01 18:57:59 +01:00
• a1a35c9b35 chore: github: add check run on pull requests Stéphane Lesimple 2020-01-10 13:19:36 +01:00
• eec77e1ab9 fix: fwdb update: remove Intel extract tempdir on exit Stéphane Lesimple 2019-12-10 19:16:58 +01:00
• 5633d374de fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278) Stéphane Lesimple 2019-12-09 23:17:37 +01:00
• a343bccb49 bump to v0.43 v0.43 Stéphane Lesimple 2019-12-08 15:25:20 +01:00
• 1f604c119b fix var typo Stéphane Lesimple 2019-12-08 15:25:54 +01:00
• bfed3187a6 fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a Stéphane Lesimple 2019-11-24 20:19:21 +01:00
• 0cd7e1164f feat: detect vanilla 5.4+ locked down mode Stéphane Lesimple 2019-12-06 23:03:36 +01:00
• 71129d6b48 fix: tsx: rtm feature bit is in EBX(11) Stéphane Lesimple 2019-12-02 19:07:10 +01:00
• 6e799e8b01 fix: mcepsc: fix logic error on non-speculative CPUs that prevented detection of MCEPSC immunity Stéphane Lesimple 2019-11-25 23:03:04 +01:00
• 4993b04922 fix: taa: CPUs having TAA_NO bit set are not vulnerable Stéphane Lesimple 2019-11-25 21:14:54 +01:00
• 4fc2afe1bc feat: add TSX_CTRL MSR detection in hardware info Stéphane Lesimple 2019-11-25 20:58:49 +01:00
• bd47275501 feat: add detection of iTLB Multihit vuln/mitigation (CVE-2018-12207) Stéphane Lesimple 2019-11-24 19:25:56 +01:00
• 8ddf6b2d6d enh: replace shell wildcard by a find to avoid potiental error (list of args too long) Stéphane Lesimple 2019-11-24 16:47:53 +01:00
• 16b6490ffc chore: avoid ${var:-]} syntax, badly confusing vim's syntax highlighter Stéphane Lesimple 2019-11-23 16:02:00 +01:00
• 18df38fae6 fix: sgx: on locked down kernels, fallback to CPUID bit for detection Stéphane Lesimple 2019-11-24 17:21:20 +01:00
• a306757c22 fix: detect Red Hat locked down kernels (impacts MSR writes) Stéphane Lesimple 2019-09-22 00:45:02 +02:00
• e01f97ee75 fix: fwdb: don't use local db if it's older than our builtin version Stéphane Lesimple 2019-11-23 22:02:49 +01:00
• fa7f814f4f chore: rename mcedb cmdline parameters to fwdb Stéphane Lesimple 2019-11-23 13:39:51 +01:00
• bb32a16a86 update fwdb to v130.20191104+i20191027 Stéphane Lesimple 2019-11-23 13:33:55 +01:00
• 8c84c0ba17 enh: fwdb: use both Intel GitHub repo and MCEdb to build our database Stéphane Lesimple 2019-11-23 12:39:59 +01:00
• 6abe1bc62b enh: kernel decompression: better tolerance over missing tools Stéphane Lesimple 2019-11-23 16:28:08 +01:00
• 5ca7fe91ff fix: pteinv: don't check kernel image if not available Stéphane Lesimple 2019-11-23 14:01:56 +01:00
• 4ba68fba74 fix: silence useless error from grep (fixes #322) Stéphane Lesimple 2019-11-23 13:51:00 +01:00
• 59ad312773 fix: msr: fix msr module detection under Ubuntu 19.10 (fixes #316) Stéphane Lesimple 2019-11-19 22:35:08 +01:00
• 418533c47e chore: remove LICENSE file, SPDX id is enough Stéphane Lesimple 2019-11-18 20:26:38 +01:00
• 3e757b6177 chore: add github check workflow Stéphane Lesimple 2019-11-18 10:48:52 -08:00
• f724f94085 enh: kernel: autodetect customized arch kernels from cmdline Stéphane Lesimple 2019-11-17 18:36:57 +01:00
• dcf540888d enh: mock: implement reading from /proc/cmdline Stéphane Lesimple 2019-11-17 18:36:08 +01:00
• 9911c243b2 feat: use --live with --kernel/--config/--map to override file detection in live mode Stéphane Lesimple 2019-11-17 14:29:32 +01:00
• cb279a49ec enh(taa): more complete version Stéphane Lesimple 2019-11-13 01:07:10 +01:00
• c100ce4c0d mcedb: update from v112 to v130 Stéphane Lesimple 2019-11-12 21:19:03 +01:00
• 4741b06160 fix: batch mode for TAA Stéphane Lesimple 2019-11-12 21:16:21 +01:00
• e0a1c2ec77 fix shellcheck warnings Stéphane Lesimple 2019-11-12 20:06:12 +01:00
• c18b88d745 Fixing typo Agata Gruza 2019-11-12 09:34:43 -08:00
• d623524342 Added support for TAA related vulnerabilities Agata Gruza 2019-11-12 09:30:36 -08:00
• f5ec320fe5 enh: rework the vuln logic of MDS with --paranoid (fixes #307) Stéphane Lesimple 2019-09-22 04:02:22 +02:00
• cc224c0522 fix: mocking value for read_msr Stéphane Lesimple 2019-09-21 18:50:08 +02:00
• 0518604fe6 Use kernel_err to avoid misreporting missing Linux kernel image Corey Wright 2019-06-29 19:56:11 -05:00
• d57fecec91 spectre-meltdown-checker.sh: fix typos Erik Zettel 2019-09-19 12:06:04 +02:00
• f835f4d07d Explain that Enhanced IBRS is better for performance than classic IBRS Stéphane Lesimple 2019-08-14 12:42:27 +02:00
• 482d6c200a Enhanced IBRS capabilities There are two flavors of IBRS: plain and enhanced. This patch tells which flavor of IBRS is in use. Agata Gruza 2019-07-29 16:56:54 -07:00
• 91d0699029 update MCEdb from v111 to v112 David Guglielmi 2019-05-29 14:55:08 +02:00
• fcc4ff4de2 update MCEdb from v110 to v111, bump to v0.42 v0.42 Stéphane Lesimple 2019-05-24 22:49:45 +02:00
• 0bd38ddda0 enh: -v -v now implies --dump-mock-data Stéphane Lesimple 2019-05-24 11:36:39 +02:00
• e83dc818cd feat(mds): implement FreeBSD mitigation detection Stéphane Lesimple 2019-05-15 20:45:28 +02:00
• d69ea67101 feat(mock): add --dump-mock-data Stéphane Lesimple 2019-05-24 10:15:02 +02:00
• dfe0d10f2a fix(mds): remove useless display of MD_CLEAR info in non-hw section Stéphane Lesimple 2019-05-24 10:20:48 +02:00
• 58a5acfdbb fix(bsd): read_msr returned data in an incorrect format Stéphane Lesimple 2019-05-24 09:33:42 +02:00
• ccb4dbef7c enh(mock): avoid reading the sysfs interface outside sys_interface_check() for higher mocking coverage Stéphane Lesimple 2019-05-23 14:27:50 +02:00
• afbb26277f feat(mock): add mocking functionality to help reproducing issues under specific CPUs Stéphane Lesimple 2019-05-23 14:26:40 +02:00
• 77b34d48c6 fix(mds): check MDS_NO bit in is_cpu_mds_free() Stéphane Lesimple 2019-05-23 14:25:13 +02:00
• 497efe6a82 fix(l1tf): RDCL_NO bit didn't take precedence for vulnerability check on some Intel CPUs Stéphane Lesimple 2019-05-23 14:23:11 +02:00
• 62b46df4e7 fix(l1tf): remove libvirtd from hypervisor detection (#278) Stéphane Lesimple 2019-05-18 14:22:42 +02:00
• 7d1f269bed fix(mds): AMD confirms they're not vulnerable Stéphane Lesimple 2019-05-16 11:31:28 +02:00
• 4f9ca803c8 Fix help text (#285) Erich Ritz 2019-05-15 10:34:51 -07:00