CVE-2024-21946

The CVE targets AMD Ryzen Master Utility installation directory permissions. Affected component: Ryzen Master/Monitoring SDK; root cause: incorrect default ACL permissions in installation folders and subfolders. Impact: local privilege escalation potentially leading to arbitrary code execution (h...

CVE-2024-21946

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21945

Summary: CVE-2024-21945 involves incorrect default ACL permissions in the AMD Ryzen Master Monitoring SDK installation directory, which could allow a low-privileged attacker to escalate privileges and potentially execute arbitrary code. The AMD bulletin AMD-SB-9004 documents the vulnerability wit...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

CVE-2024-21939 concerns the AMD Cloud Manageability Service (ACMS). The connected AMD advisory documents indicate the issue stems from incorrect default ACL permissions in the ACMS Software installation directory, enabling a low-privileged local attacker to escalate privileges and potentially exe...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21938

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21938

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21938

Summary: CVE-2024-21938 concerns the AMD Management Plugin for Microsoft System Center Configuration Manager (SCCM). The root cause is incorrect default permissions in the SCCM installation directory, which could let a low-privilege attacker escalate privileges and potentially achieve arbitrary c...

CVE-2024-21937

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21937

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21937

CVE-2024-21937 concerns the AMD HIP SDK installation directory where incorrect default ACL permissions are inherited from the parent folder. This could allow a local, low-privileged attacker to escalate privileges and potentially achieve arbitrary code execution. The AMD-SB-6015 bulletin document...

AMD HIP SDK Incorrect Default Permissions Vulnerability - Lenovo Support US

No description provided...

Moderate: Red Hat Security Advisory: microcode_ctl security update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

kernel: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use flexible array sizes, use flexible arrays...

kernel: drm/amdgpu: Init zone device and drm client after mode-1 reset on reload

No description is available for this CVE...

kernel: cpufreq: amd-pstate: fix memory leak on CPU EPP exit

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on CPU EPP exit The cpudata memory from kzalloc in amdpstateeppcpuinit is not freed in the analogous exit function, so fix that. rjw: Subject and changelog edits...

kernel: drm/amd/display: Wake DMCUB before executing GPINT commands

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT commands Why DMCUB can be in idle when we attempt to interface with the HW through the GPINT mailbox resulting in a system hang. How Add dcwakeandexecutegpint to wrap the wake,...

kernel: drm/amd/display: fixed integer types and null check locations

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations why: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check...