Stéphane Lesimple e7fa2f30cc enh: CVE-2022-40982 (Downfall) overhaul ...

- added `--kernel-config` support for all three Kconfig variants seen over all kernel versions up to now
- added `--kernel-map` support for `gds_select_mitigation` in `System.map`
- fixed the `--sysfs-only` mode
- added verbose information about remediation when `--explain` is used
- implemented `--paranoid mode`, requiring `GDS_MITIGATION_LOCKED` so that mitigation can't be disabled at runtime
- fixed offline mode (was wrongly looking at the system `dmesg`)
- better microcode status reporting (enabled, disabled, unsupported, unknown)
- fixed unknown (EOL) AVX-capable Intel family 6 CPUs now defaulting to affected
- fixed 2 missing known affected CPU models: INTEL_FAM6_SKYLAKE_L and INTEL_FAM6_SKYLAKE
- fixed case when we're running in a VM and the hypervisor doesn't let us read the MSR

2026-04-02 20:09:54 +02:00

.github/workflows

chore: build: also add new files, handle github workflows

2026-04-02 18:47:00 +02:00

dist

chore: readme: add a second table one about impact/mitigation, rework sections

2026-04-01 00:21:35 +02:00

src

enh: CVE-2022-40982 (Downfall) overhaul

2026-04-02 20:09:54 +02:00

.gitignore

chore: add .gitignore

2026-03-30 23:07:59 +02:00

build.sh

chore: set VERSION when building

2026-03-31 00:18:09 +02:00

DEVELOPMENT.md

chore: update dev guidelines

2026-04-02 19:55:07 +02:00

Makefile

dev-build workflow

2026-03-30 23:07:59 +02:00

UNSUPPORTED_CVE_LIST.md

chore: adjust workflow for dev-build

2026-03-30 23:07:59 +02:00

Description

No description provided

cve-2017-5715cve-2017-5753cve-2017-5754cve-2018-3615cve-2018-3620cve-2018-3639cve-2018-3640cve-2018-3646cve-2019-11135dragonflybsdforeshadowfreebsdkernellinuxmeltdownmitigationnetbsdspectrezombieload

3.2 MiB

Languages

Shell 99.9%