Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the amtrcv function not releasing an incoming skb when a socket is not found, potentially leading to a memor...

PT-2025-8303

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the amt rcv function. This occurs when the amt receives packets and is unable to find a socket, resulting in...

CVE-2022-49461: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: amt: fix memory leak for advertisement message When a gateway receives an advertisement message, it extracts relay information and then it should be freed. But the advertisement handler doesn't free it. So, memory leak would occu...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-38307

Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-26021

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-26021

CVE-2024-26021 is an Intel firmware vulnerability affecting Intel® AMT and Intel® Standard Manageability firmware in multiple chipset families (e.g., C420/C620/C740, 8th/10th/11th Gen platforms). The issue is described as improper initialization in the firmware, enabling a privileged local attack...

CVE-2024-38307

CVE-2024-38307 affects firmware for Intel® AMT and Intel® Standard Manageability due to improper input validation. An authenticated user may cause denial of service via network access. The issue is documented with high impact (availability of the system) and corresponding CVSS scores (4.0/3.1) in...

CVE-2024-38307

Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...

CVE-2024-26021: Improper Initialization

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-38307: Improper Input Validation

Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...

PT-2025-6629

Name of the Vulnerable Software and Affected Versions IntelR AMT and IntelR Standard Manageability affected versions not specified Description The issue is related to improper initialization in the firmware, which may allow a privileged user to potentially enable information disclosure via local...

CVE-2022-29893

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-36392

Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-27497

Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-26845

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)

None None...

Intel AMT Digest Authentication Bypass Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Intel AMT Digest Authentication Bypass Scanner', 'Description' = %q This module scans for Intel Active Management Technology endpoints and attemp...

CVE-2023-38655

CVE-2023-38655 concerns improper buffer restrictions in firmware for Intel® AMT and Intel® Standard Manageability. The vulnerability could allow a privileged attacker to cause a denial of service over the network. Connected sources corroborate the issue within Intel chipset firmware/CSME/AMT ecos...