Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
3 security issues (#2180425) x86 shadow plus log-dirty mode use-after-free [XSA-427, CVE-2022-42332] x86/HVM pinned cache attributes mis-handling [XSA-428, CVE…
x86: Cross-Thread Return Address Predictions [XSA-426, CVE-2022-27672]
An update that fixes 17 vulnerabilities is now available.
An update that fixes 21 vulnerabilities is now available.
An update that fixes 20 vulnerabilities is now available.
An update that fixes 20 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
An update that solves two vulnerabilities and has four fixes is now available.
An update that solves 8 vulnerabilities and has one errata is now available.
insufficient TLB flush for x86 PV guests in shadow mode [XSA-408, CVE-2022-33745] ---- Retbleed - arbitrary speculative code execution with return instructions…
insufficient TLB flush for x86 PV guests in shadow mode [XSA-408, CVE-2022-33745]
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Retbleed - arbitrary speculative code execution with return instructions [XSA-407, CVE-2022-23816, CVE-2022-23825, CVE-2022-29900]
Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-3374]
x86: MMIO Stale Data vulnerabilities [XSA-404, CVE-2022-21123, CVE-2022-21125, CVE-2022-21166]
An update that fixes three vulnerabilities is now available.
