947 matches found
CLSA-2024-1728478701 Fix CVE(s): CVE-2023-31315
New microcode update packages from AMD upstream up to 2024-08-11: - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10ver:0x0A00107A, cpuid:0x00A10F12ver:0x0A101248, cpuid:0x00AA0F02ver:0x0AA00215, cpuid:0x00A00F12ver:0x0A001238, cpuid:0x00A10F11ver:0x0A101148,...
PT-2026-2530
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc1-syzk Description The Linux kernel contained a flaw in the perf/x86/amd subsystem. A race condition involving NMI and throttle mechanisms could lead to a general protection fault GPF on AMD machines whe...
CLSA-2024-1728297353 kernel: Fix of 5 CVEs
drm/amd/pm: fix the Out-of-bounds read warning CVE-2024-46731 - hwmon: w83627ehf Fix underflows seen when writing limit attributes CVE-2024-46756 - hwmon: lm95234 Fix underflows seen when writing limit attributes CVE-2024-46758 - hwmon: nct6775-core Fix underflows seen when writing limit...
kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory
A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...
kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity
A flaw was found in the way AMD IOMMU handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity
A flaw was found in the way AMD IOMMU handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory
A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...
OESA-2024-2185 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix iasize underflow iattr::iasize is a lofft, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there ...
SUSE CVE-2024-46727
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otgmaster NULL check within resourcelogpipetopologyupdate Why Coverity reports NULLRETURN warning. How Add otgmaster NULL check...
The vulnerability of the DRM/amdgpu/vkms components of the Linux operating system, related to pointer dereferencing errors, allows a hacker to trigger a service failure.
The vulnerability of the DRM/amdgpu/vkms components of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
A security vulnerability was identified in the Linux kernel's Kernel-based Virtual Machine subsystem KVM, specifically affecting the Secure Virtual Machine SVM feature used on AMD processors. The issue arises from a use-after-free condition in the svmregisterencregion function, which can lead to...
hw: amd: SMM Lock Bypass
A flaw was found in hw. Improper validation in a model-specific register MSR could allow a malicious program with ring0 access to modify the SMM configuration while the SMI lock is enabled. This issue can lead to arbitrary code execution...
kernel: Reserved fields in guest message responses may not be zero initialized
A flaw was found in some AMD CPUs where the guest message responses have not been zero-initialized. This issue may allow a local attacker with the ability to run arbitrary code on a container or virtual machine to discover sensitive information contained in the host system's memory...
kernel: Reserved fields in guest message responses may not be zero initialized
A flaw was found in some AMD CPUs where the guest message responses have not been zero-initialized. This issue may allow a local attacker with the ability to run arbitrary code on a container or virtual machine to discover sensitive information contained in the host system's memory...
AMD Uninitialized GPU Register Access Advisory - Lenovo Support US
No description provided...
amd: Return Address Predictor vulnerability leading to information disclosure
A side channel vulnerability was found in hw amd. Some AMD CPUs may allow an attacker to influence the return address prediction. This issue may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure...
AMD Graphics Driver 安全漏洞
AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that stems from improper validation of the array index, allowing a privileged attacker to cause an out-of-bounds memory read in PMFW, which could result in a...
AMD μProf 安全漏洞
AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from improper input validation and could allow an attacker to perform a write to an invalid address, resulting in a denial of service...
AMD Graphics Driver 安全漏洞
AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Graphics Driver that stems from insufficient boundary checking, which allows an attacker to cause a denial of service by sending a malformed message using a malicious VF...
PT-2024-12281 · Amd · Amd Μprof
Name of the Vulnerable Software and Affected Versions: AMD μProf affected versions not specified Description: The issue is related to improper input validation in AMD μProf, which could allow an attacker to perform a write to an invalid address. This could potentially result in denial of service...