Commit Graph

  • 0fa7e44327 doc: add Blindside to unsupported list (#374) Stéphane Lesimple 2026-04-06 10:27:17 +02:00
  • f100b4e1dc doc: add CVE-2020-0549 (L1D Eviction Sampling, CacheOut) as unsupported Stéphane Lesimple 2026-04-06 03:33:32 +02:00
  • 6332fc3405 fix: CVE-2019-11135 (TAA) detect new 0x10F MSR for TSX-disabled CPUs (#414) Stéphane Lesimple 2026-04-06 03:23:56 +02:00
  • 3c61c7489b fix: CVE-2024-3635[0,7] don't print lines about TSA CPUID bits under non-AMD Stéphane Lesimple 2026-04-06 03:09:18 +02:00
  • 3d01978cd4 feat: add CVE-2023-20588 (AMD DIV0 bug) (#473) Stéphane Lesimple 2026-04-06 02:40:09 +02:00
  • 53c45e3363 doc: update dev guidelines Stéphane Lesimple 2026-04-05 23:58:14 +02:00
  • acf8b585a5 doc: add CVE-2024-2201 (Native BHI) and TLBleed as unsupported Stéphane Lesimple 2026-04-06 01:12:34 +02:00
  • 076a1d5723 fix: CVE-2020-0543 (SRBDS): microcode mitigation misdetected (#492) Stéphane Lesimple 2026-04-06 00:58:49 +02:00
  • ee618ead07 enh: detect IPBP return predictor bypass in Inception/SRSO ("PB-Inception") (#500) Stéphane Lesimple 2026-04-06 00:45:09 +02:00
  • 1ff1dfbe26 fix: don't default to 0x0 ucode when unknown Stéphane Lesimple 2026-04-06 00:38:55 +02:00
  • 78e4d25319 fix: bsd: use proper MSR for AMD in ucode version read fallback Stéphane Lesimple 2026-04-06 00:38:39 +02:00
  • 24ed9ccaf6 enh: MDS FreeBSD: detect software mitigation as OK unless --paranoid (#503) Stéphane Lesimple 2026-04-06 00:17:32 +02:00
  • a49234ed96 doc: add CVE-2021-26318 (ADM Prefetch) to unsupported list Stéphane Lesimple 2026-04-05 23:57:53 +02:00
  • 2ed15da028 feat: implement CVE-2023-28746 (RFDS, Register File Data Sampling) Stéphane Lesimple 2026-04-05 23:57:28 +02:00
  • 0fcdc6e6cc feat: add SLS (Straight-Line Speculation) check with --extra option Stéphane Lesimple 2026-04-05 23:54:12 +02:00
  • 9383287fc6 chore: delete FAQ.md from ./ in test-build (moved to doc/ in test) Stéphane Lesimple 2026-04-08 20:18:32 +00:00
  • a2823830a6 chore: create doc/ in -build branch github-actions[bot] 2026-04-08 20:10:38 +00:00
  • 6212de226a enh: when reading CPUID is unavailable (VM?), fallback to cpuinfo where applicable github-actions[bot] 2026-04-06 17:00:15 +00:00
  • f8873048fc enh: read/write_msr: clearer error messages github-actions[bot] 2026-04-06 16:44:52 +00:00
  • 463e33d61c fix: CVE-2017-5715 (Spectre V2): Red Hat specific fix for RSB Filling (fixes #235) github-actions[bot] 2026-04-06 15:42:13 +00:00
  • 4d1af90420 fix: better compatibility under busybox, silence buggy unzlma versions (fix #432) github-actions[bot] 2026-04-06 15:14:01 +00:00
  • e8a3c7d7f5 fix: wrmsr: specify core number (closes #294) github-actions[bot] 2026-04-06 15:02:33 +00:00
  • 8ae598802c enh: clearer kernel info section at the top of the script github-actions[bot] 2026-04-06 13:01:21 +00:00
  • 48a4c0e49c chore: add comment about is_intel/amd/hygon recursion github-actions[bot] 2026-04-06 12:06:52 +00:00
  • 1557bbee42 doc: document Platypus (CVE-2020-8694 CVE-2020-8695) as out of scope (#384) github-actions[bot] 2026-04-06 11:27:56 +00:00
  • 4530f39fae doc: document CVE-2020-24511 and CVE-2020-24512 as being out of scope along with rationale (#409) github-actions[bot] 2026-04-06 11:08:28 +00:00
  • d247733496 fix: CPUs affected by MSBDS but not MDS (fix #351) github-actions[bot] 2026-04-06 10:59:40 +00:00
  • fc66ee567a doc: add CVE-2019-11157 (Plundervolt) to unsupported CVE list github-actions[bot] 2026-04-06 10:40:10 +00:00
  • 072b98cefd fix: better detect kernel lockdown & no longer require cap_flush_cmd to deem CVE-2018-3615 as mitigated (fix #296) github-actions[bot] 2026-04-06 10:30:36 +00:00
  • bceb62f982 feat: implement check for MMIO Stale Data (CVE-2022-21123 CVE-2022-21125 CVE-2022-21166) (#437) github-actions[bot] 2026-04-06 09:31:08 +00:00
  • aacdd35c57 doc: add Blindside to unsupported list (#374) github-actions[bot] 2026-04-06 08:28:38 +00:00
  • c0a389b086 doc: add CVE-2020-0549 (L1D Eviction Sampling, CacheOut) as unsupported github-actions[bot] 2026-04-06 01:34:41 +00:00
  • 726f9e54f5 fix: CVE-2019-11135 (TAA) detect new 0x10F MSR for TSX-disabled CPUs (#414) github-actions[bot] 2026-04-06 01:25:09 +00:00
  • 11210ab772 fix: CVE-2024-3635[0,7] don't print lines about TSA CPUID bits under non-AMD github-actions[bot] 2026-04-06 01:10:32 +00:00
  • 624aef4a46 feat: add CVE-2023-20588 (AMD DIV0 bug) (#473) github-actions[bot] 2026-04-06 00:47:00 +00:00
  • b6a7ee2345 doc: add CVE-2024-2201 (Native BHI) and TLBleed as unsupported github-actions[bot] 2026-04-06 00:25:24 +00:00
  • 5698711b3d fix: CVE-2020-0543 (SRBDS): microcode mitigation misdetected (#492) github-actions[bot] 2026-04-05 23:00:02 +00:00
  • e0f9aeab81 enh: detect IPBP return predictor bypass in Inception/SRSO ("PB-Inception") (#500) github-actions[bot] 2026-04-05 22:47:43 +00:00
  • 2f550ba8cd fix: don't default to 0x0 ucode when unknown github-actions[bot] 2026-04-05 22:40:17 +00:00
  • 3f60773ec4 enh: MDS FreeBSD: detect software mitigation as OK unless --paranoid (#503) github-actions[bot] 2026-04-05 22:18:42 +00:00
  • acaf3b684f doc: update dev guidelines github-actions[bot] 2026-04-05 22:01:40 +00:00
  • 8a6f9d5d63 Implement ITS/VMScape/BTI and misc enhancements (#539) v26.26.0404682 Stéphane Lesimple 2026-04-04 16:38:49 +00:00
  • 73b67b4a80 Merge branch 'master' into source-build Stéphane Lesimple 2026-04-04 16:25:35 +00:00
  • ea6b8efd18 fix: add rebleet to --variant github-actions[bot] 2026-04-04 16:23:18 +00:00
  • 0ec51090ae fix: add rebleet to --variant github-actions[bot] 2026-04-04 16:22:49 +00:00
  • 7a7408d124 fix: add rebleet to --variant Stéphane Lesimple 2026-04-04 18:17:35 +02:00
  • e9cb988409 fix: add rebleet to --variant github-actions[bot] 2026-04-04 16:21:37 +00:00
  • c147f3f7d4 retbl github-actions[bot] 2026-04-04 16:19:20 +00:00
  • 24d92540a7 enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI) github-actions[bot] 2026-04-04 16:08:25 +00:00
  • cccb3c0081 enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI) Stéphane Lesimple 2026-04-04 17:50:04 +02:00
  • 090f109c52 doc: add CVE-2023-31315 (SinkClose) to the unsupported list, add categories Stéphane Lesimple 2026-04-04 17:49:38 +02:00
  • 5dc9c3c18d chore: reorder CVE list in README.md Stéphane Lesimple 2026-04-04 16:14:05 +02:00
  • a00fab131f feat: implement CVE-2025-40300 (VMScape) and CVE-2024-45332 (BTI) Stéphane Lesimple 2026-04-04 14:41:09 +02:00
  • e0b818f8fa chore: stalebot: disable dryrun by default Stéphane Lesimple 2026-04-04 14:38:40 +02:00
  • 4af11551ba feat: implement CVE-2024-28956 (ITS, Indirect Target Selection) vulnerability and mitigation detection Stéphane Lesimple 2026-04-04 14:36:14 +02:00
  • dfed6f35c5 doc: add note about more unsupported CVEs Stéphane Lesimple 2026-04-04 14:30:05 +02:00
  • 1652977f47 add a generated version of src/libs/003_intel_models.sh Stéphane Lesimple 2026-04-04 14:20:18 +02:00
  • a089ae8cef fix: sys_interface_check() must set the caller's $msg var (closes #533) Stéphane Lesimple 2026-04-04 14:19:47 +02:00
  • cc6bbaad19 chore: don't include src/ generated files in build Stéphane Lesimple 2026-04-02 23:49:40 +02:00
  • 2717b0a4be doc: CVE-2020-12965 unsupported (#478) Stéphane Lesimple 2026-04-02 23:48:28 +02:00
  • 065f19e313 enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI) github-actions[bot] 2026-04-04 15:51:28 +00:00
  • 1214e63687 chore: reorder CVE list in README.md github-actions[bot] 2026-04-04 14:33:25 +00:00
  • 67be7eb116 chore: reorder CVE list in README.md github-actions[bot] 2026-04-04 14:16:02 +00:00
  • b4db134e49 feat: implement CVE-2025-40300 (VMScape) and CVE-2024-45332 (BTI) github-actions[bot] 2026-04-04 13:08:23 +00:00
  • d7cd9e8b6b add a generated version of src/libs/003_intel_models.sh github-actions[bot] 2026-04-04 12:24:10 +00:00
  • a4c3900ef0 add a generated version of src/libs/003_intel_models.sh github-actions[bot] 2026-04-04 12:21:51 +00:00
  • f2d871acff fix: spurious local keyword broke sysfs based detection (#533) (#534) Stéphane Lesimple 2026-04-02 23:31:58 +00:00
  • 1d00acbc9a chore: don't include src/ generated files in build github-actions[bot] 2026-04-02 21:56:42 +00:00
  • 90a8a3057c chore: don't include src/ generated files in build github-actions[bot] 2026-04-02 21:54:17 +00:00
  • 40b7ae9098 chore: don't include src/ generated files in build github-actions[bot] 2026-04-02 21:50:52 +00:00
  • 553a9ec60f Merge pull request #532 from speed47/test github-actions[bot] 2026-04-02 21:33:46 +00:00
  • 6fac2d8ff1 Merge pull request #532 from speed47/test Stéphane Lesimple 2026-04-02 21:32:39 +00:00
  • 27ac93dd39 doc: CVE-2018-3693 CVE-2019-1125 CVE-2019-15902 unsupported or already included github-actions[bot] 2026-04-02 21:23:44 +00:00
  • ae5493257e doc: CVE-2018-3693 CVE-2019-1125 CVE-2019-15902 unsupported or already included Stéphane Lesimple 2026-04-02 23:22:31 +02:00
  • dab7bebd3c doc: CVE-2018-15572 is already implemented along Spectre V2 github-actions[bot] 2026-04-02 21:13:46 +00:00
  • 47e202100a doc: CVE-2018-15572 is already implemented along Spectre V2 Stéphane Lesimple 2026-04-02 23:10:39 +02:00
  • 8f76537159 doc: CVE-2018-15572 is already implemented along Spectre V2 github-actions[bot] 2026-04-02 21:11:59 +00:00
  • fd7083cb08 doc: CVE-2018-9056 is out of scope (closes #169) github-actions[bot] 2026-04-02 20:59:55 +00:00
  • 0edb357894 doc: CVE-2018-9056 is out of scope (closes #169) Stéphane Lesimple 2026-04-02 22:58:45 +02:00
  • ed6a0a2882 doc: unsupported CVE list Stéphane Lesimple 2026-04-02 22:51:55 +02:00
  • 8ef4c71d36 enh: group results by 4 in the summary line at the end of the run github-actions[bot] 2026-04-02 20:46:29 +00:00
  • 86e0fae48a enh: group results by 4 in the summary line at the end of the run Stéphane Lesimple 2026-04-02 22:45:08 +02:00
  • 240d6db210 enh: rework VERSION adjust when we're cloned github-actions[bot] 2026-04-02 20:35:00 +00:00
  • cb3b9a37fa enh: rework VERSION adjust when we're cloned Stéphane Lesimple 2026-04-02 22:32:22 +02:00
  • b9f75346d4 enh: auto-generate intel model list Stéphane Lesimple 2026-04-02 22:24:43 +02:00
  • 4f6dbb36c8 feat: implement Retbleed (CVE-2022-29900 CVE-2022-29901) mitigation detection Stéphane Lesimple 2026-04-02 22:12:56 +02:00
  • d644941a76 chore: update dev doc with check_CVE_* header exception Stéphane Lesimple 2026-04-02 22:09:09 +02:00
  • fbfdb89e7a chore: add proper header to all src/vulns/* files github-actions[bot] 2026-04-02 19:35:40 +00:00
  • 3ea8e213ec chore: add proper header to all src/vulns/* files Stéphane Lesimple 2026-04-02 20:47:54 +02:00
  • 5e3033e2f5 enh: CVE-2022-40982 (Downfall) overhaul & Spectre V2 enhancements Stéphane Lesimple 2026-04-02 19:55:25 +02:00
  • 5c571bacc6 enh: CVE-2022-40982 (Downfall) overhaul github-actions[bot] 2026-04-02 18:11:41 +00:00
  • 6f8112c700 enh: CVE-2022-40982 (Downfall) overhaul github-actions[bot] 2026-04-02 18:03:22 +00:00
  • 37204869f8 chore: update dev guidelines Stéphane Lesimple 2026-04-02 19:55:07 +02:00
  • 83ebe2f75f chore: update workflows (#531) Stéphane Lesimple 2026-04-02 16:53:44 +00:00
  • 75ad60f42a Merge branch 'master' into source-build Stéphane Lesimple 2026-04-02 16:53:03 +00:00
  • 931c955765 Merge pull request #530 from speed47/test github-actions[bot] 2026-04-02 16:50:52 +00:00
  • d3c0f1a24d Merge pull request #530 from speed47/test Stéphane Lesimple 2026-04-02 16:49:41 +00:00
  • f46c743cad chore: build: also add new files, handle github workflows github-actions[bot] 2026-04-02 16:48:13 +00:00
  • c799974038 chore: build: also add new files, handle github workflows Stéphane Lesimple 2026-04-02 18:47:00 +02:00
  • 0974871a6c chore: build: also add new files Stéphane Lesimple 2026-04-02 18:43:51 +02:00