HPESBCR04811 rev.1 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX425 Compute Blade -Prior to v1.7.6 - HFP Firmware Pack 24.11.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-21924 |...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a hacker to cause a service failure...

CLSA-2025-1739965377 linux-firmware: Fix of 2 CVEs

Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584...

The vulnerability of Linux operating system’s DRM/AMD/AMDGPU kernel components, which allows a hacker to trigger a service failure.

The vulnerability of Linux operating system’s DRM/AMD/AMDGPU cores relates to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the AmdCpmDisplayFeatureSMM driver of AMD’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the AmdCpmDisplayFeatureSMM driver of AMD’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/amd/display components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the fTPM driver’s microprogramming software for AMD processors allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fTPM driver’s microprogramming software for AMD processors lies in improper checking of resource allocation values and execution of calculations. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

SUSE CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS is to support a new UMA carveout model. This resolves a null dereference issue when accessing Ctx-dcbios-integratedinfo, as this variable...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: Adjusted error handling in case of absence of a codec device. The acpigetfirstphysicalnode function may return NULL in several situations e.g., no such device exists, ACPI table error, reference count drops to 0, etc...

PT-2025-6384 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Integrated Management Technology AIM-...

AMD Server Processor 输入验证错误漏洞

AMD Server Processor is a processor product from UltraMicro Semiconductor AMD for the server market, which is primarily used in data centers, cloud computing, and high performance computing. AMD Server Processor suffers from an input validation error vulnerability that stems from incorrect input...

PT-2025-6385 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: A DLL hijacking issue in the Manageability Service could allow an attacker to achieve privilege escalation, potentially resulting in...

AMD Server Processor 输入验证错误漏洞

AMD Server Processor is a processor product from UltraMicro Semiconductor AMD for the server market, which is primarily used in data centers, cloud computing, and high performance computing. AMD Server Processor suffers from an input validation error vulnerability that stems from incorrect input...

AMD Server Processor 安全漏洞

AMD Server Processor is a processor product for the server market from UltraMicro Semiconductor AMD that is primarily used in data centers, cloud computing, and high performance computing. A security vulnerability exists in AMD Server Processor that stems from incorrect access control in the IOMM...

AMD Client Processor 安全漏洞

AMD Client Processor is a processor for client devices e.g., personal computers, laptops, etc. from UltraMicroelectronics AMD. A security vulnerability exists in AMD Client Processor that stems from improper access control of the fTPM driver in a trusted operating system could allow a privileged...

AMD Graphics Driver Vulnerabilities – February 2025 - Lenovo Support US

No description provided...

SUSE CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...