Astra Linux – Vulnerability in Intel Microcode

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable privilege escalation through local access...

Amazon Linux 2023 : microcode_ctl (ALAS2023-2025-1190)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1190 advisory. Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-2005...

CVE-2025-24305: Insufficient Control Flow Management

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2025-32725

Name of the Vulnerable Software and Affected Versions: IntelR XeonR processors affected versions not specified Description: Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware may allow a privileged user to potentially enable escalation of privilege via local...

Intel® ACTM Module Software Advisory

Summary: Potential security vulnerabilities in some Intel® processors with Intel® Alias Checking Trusted Module Intel® ACTM may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22185 Description:...

K000148650: Intel processor vulnerabilities CVE-2024-22185 and CVE-2024-24985

Security Advisory Description CVE-2024-22185 Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-24985 Exposure of resource to wrong sphere in some IntelR processor...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

CVE-2024-22185 is a time-of-check/time-of-use race condition in Intel ACTM (Alias Checking Trusted Module) potentially enabling local privilege escalation. The advisory and Red Hat/Intel sources indicate this affects certain Intel Xeon processor families and is mitigated through firmware updates ...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24985: Exposure of Resource to Wrong Sphere

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

HPESBHF04734 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline servers Using Certain Intel Processors, INTEL-SA-01111, UPLR2 - Intel ACTM Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.3008-09-2024 HPE Alletra 4120 - Prior to 2.3008-09-2024 HPE Alletra 4140 - Prior to 2.3008-09-2024 HPE ProLiant DL110 Gen11 - Prior to...

PT-2024-8769 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel processors 4th Generation and 5th Generation Description: The issue is related to a Time-of-check Time-of-use Race Condition in the Intel Alias Checking Trusted Module Intel ACTM component of Intel microcode. This condition arises from...

CVE-2019-7361: Deserialization of Untrusted Data

An attacker may convince a victim to open a malicious action micro .actm file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018,...