AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that originates from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting confidentiality, integrity, or availability...

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting integrity and availability...

The vulnerability in the Linux operating system’s driver/CPU/GPU/DRM/AMD/AMDKFD/KFD_MIGRATE.C code, which allows a hacker to trigger a service failure

The vulnerability in the Linux operating system’s driver/CPU/GPU/DRM/AMD/AMDKFD/KFDMIGRATE.c code is related to incorrect resource synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the cm_helper_translate_curve_to_degamma_hw_format() function in the drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cmhelpertranslatecurvetodegammahwformat function in the drivers/gpu/drm/amd/display/dc/dcn10/dcn10cmcommon.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

OESA-2025-1307 linux-firmware security update

This package contains firmware images required by some devices. Security Fixes: Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a...

The vulnerability of the function dcn3_clk_mgr_construct() in the drivers/gpu/drm/amd/display/dc/clk_mgr/dcn30/dcn30_clk_mgr.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dcn3clkmgrconstruct function in the drivers/gpu/drm/amd/display/dc/clkmgr/dcn30/dcn30clkmgr.c module of the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability may allow an attacker to cause a service failure...

The vulnerability of the dcn20_get_dcc_compression_cap() function in the drivers/gpu/drm/amd/display/dc/resource/dcn20/dcn20_resource.c driver module allows a malicious actor to trigger a service failure. This vulnerability exists in the Linux operating system’s AMD GPU Direct Rendering Infrastructure (DRI) support driver.

The vulnerability of the dcn20getdcccompressioncap function in the drivers/gpu/drm/amd/display/dc/resource/dcn20/dcn20resource.c driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the enable_phantom_plane() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2_mall_phantom.c kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the enablephantomplane function in the drivers/gpu/drm/amd/display/dc/dml2/dml2mallphantom.c kernel of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the restore_planes_and_stream_state() function in the drivers/gpu/drm/amd/display/dc/core/dc.c kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the restoreplanesandstreamstate function in the drivers/gpu/drm/amd/display/dc/core/dc.c kernel of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the System Management Mode (SMM) mode of AMD microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the System Management Mode SMM mode of AMD microprogramming processor software is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the AMD CPU ROM microprogramming system’s loader allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of AMD CPU ROM microprogramming software’s loader is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the System Management Mode (SMM) mode of AMD microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the System Management Mode SMM mode of AMD microprogramming processors is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the memory management block for IOMMU operations in AMD’s microprogramming software for processors allows attackers to circumvent security restrictions and compromise the integrity of protected information.

The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems is related to incorrect input of configuration data. Exploiting this vulnerability can allow attackers to circumvent security restrictions and compromise the integrity of protected information...

The vulnerability of the integrated controller, Satellite Management Controller (SMC), in AMD MI300X microprocessor-based software allows a intruder to execute arbitrary commands and cause malfunctions during maintenance.

The vulnerability of the integrated controller, Satellite Management Controller SMC, in the microprogrammed software of AMD MI300X processors is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands and cause...

The vulnerability of the integrated controller, Satellite Management Controller (SMC), in the microprogrammed software of AMD MI300X processors allows a hacker to execute arbitrary commands.

The vulnerability of the integrated controller, Satellite Management Controller SMC, in the microprogrammed software of AMD MI300X processors is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

AMD Processors 安全漏洞

AMD Processors is a processor from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Processors that stems from a microcode signature verification bypass that could lead to an attacker elevating privileges...

HPESBHF04826 rev.2 - Certain HPE ProLiant DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7033: AMD CPU Microcode Signature Verification, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.4001-17-2025 HPE ProLiant DL325 Gen11 Server - Prior to v2.4003-21-2025 HPE ProLiant DL365 Gen11 Server - Prior to v2.4003-21-2025 HPE...

SUSE CVE-2022-49549

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Fix memory leak when thresholdcreatebank fails In mcethresholdcreatedevice, if thresholdcreatebank fails, the previously allocated threshold banks array @bp will be leaked because the call to mcethresholdremovedevice...

CLSA-2025-1740470330 linux-firmware: Fix of 2 CVEs

Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584...

The vulnerability of components related to DRM, AMD, and PM in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/AMD/PM components in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...