476 matches found
CVE-2026-68152
A flaw was found in the Linux kernel's AMT Accelerated Mobile Page device driver. A use-after-free vulnerability can occur due to a race condition during device removal. This allows delayed work items to access a freed memory structure, potentially leading to kernel crashes or memory corruption. ...
EUVD-2026-56480
Improper initialization in some firmware for some IntelR Active Management Technology IntelR AMT, and some IntelR Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This resul...
CVE-2026-20734
The CVE-2026-20734 entry concerns firmware in Intel AMT and Intel Standard Manageability. The root cause is improper initialization in certain firmware, leading to an information disclosure. A local attacker with privileged user status and a low attack complexity could trigger data exposure witho...
EUVD-2026-56475
Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...
CVE-2026-20715
CVE-2026-20715 involves improper input validation in some firmware for Intel AMT and Intel Standard Manageability. A network-adjacent, unauthenticated attacker with low complexity and no user interaction could cause a denial of service via network access. The impact is limited to availability (hi...
EUVD-2026-56473
Insertion of sensitive information into log file in the subsystem for the IntelR AMT and IntelR Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur v...
CVE-2026-20708
CVE-2026-20708 affects the Intel AMT and Intel Standard Manageability subsystem. The issue is described as insertion of sensitive information into a log file, enabling information disclosure. The entry indicates a network-adjacent attacker with high privileges and high attack complexity could cau...
CVE-2026-68302
A flaw was found in the Linux kernel's Adjacency Management Protocol AMT implementation. Several AMT receive and transmit paths improperly cache pointers to socket buffer skb headers. When a helper function reallocates the skb head, these cached pointers become invalid, leading to a use-after-fre...
CVE-2026-68302 amt: re-read skb header pointers after every pull
In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...
CVE-2026-68152
The vulnerability CVE-2026-68152 affects the Linux kernel AMT support. A use-after-free can occur when an AMT device is removed: pending delayed works may access the freed amt_dev structure, risking kernel crashes or memory corruption. The race arises because amt_dev_stop() cancels delayed works ...
CVE-2026-68152 amt: fix use-after-free in AMT delayed works
In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: amt: fixed a possible memory leak in amtrcv If amt receives packets and finds a socket; if it cannot find a socket, it should free the received skb. However, this is not done, resulting in a possible memory leak...
Malicious code in amt-package-united-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f8cf1c89ae16f5297d8a873529f5ba61b4d746f1f79667f803c96bf92507f The package amt-package-united-icons was found to contain malicious code. Source: ghsa-malware...
MAL-2026-1304 Malicious code in amt-package-united-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f8cf1c89ae16f5297d8a873529f5ba61b4d746f1f79667f803c96bf92507f The package amt-package-united-icons was found to contain malicious code. Source: ghsa-malware...
CVE-2025-32008
Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...
CVE-2025-32008
Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...
CVE-2025-32008
Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...
Intel AMT和Intel Standard Manageability 缓冲区错误漏洞
Intel AMT and Intel Standard Manageability are active management technology modules developed by Intel Corporation in the United States. Both Intel AMT and Intel Standard Manageability have buffer overflow vulnerabilities, which stem from out-of-bounds writes in the firmware, potentially leading ...
CVE-2021-33107
Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...