CVE-2023-40540

CVE-2023-40540 relates to Intel® NUC BIOS firmware. Affected component: BIOS firmware on Intel NUC platforms. Issue: Non-Transparent Sharing of Microarchitectural Resources could allow a local-privilege user to disclose information via local access. Root cause described as improper sharing of mic...

CVE-2023-40540

Non-Transparent Sharing of Microarchitectural Resources in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-40540

Non-Transparent Sharing of Microarchitectural Resources in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-25756

Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2023-25756

The CVE-2023-25756 issue affects Intel BIOS firmware across multiple processors, caused by an out-of-bounds read that may allow an authenticated user to escalate privileges via adjacent access. Documents from Intel (INTEL-SA-00924) confirm the vulnerability in BIOS software and propose updates to...

CVE-2023-40220

Technical details about CVE-2023-40220 are not publicly provided in the provided documents. Monitor for updates from Intel and other vendors for affected products, remediation steps, and evidence of exploit activity.

kernel: drm/radeon: Add the missed acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios information from ACPI table in radeonacpivfctbios, it misses to call acpiputtable to release the ACPI memory after the init, so add...

kernel: drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: fix a memory leak in generatelfpdataptrs When size != 0 || ptrs-lvds entries != 3, the program tries to free the ptrs. However, the ptrs is not created by calling kzmalloc, but is obtained by pointer offset...

kernel: Linux kernel: Resource exhaustion in amdgpu due to PCI device reference count leak

A flaw was found in the Linux kernel's drm/amdgpu component. A missing call to pcidevput in the amdgpuatrmgetbios function leads to a PCI device reference count leak. A local attacker could exploit this to cause resource exhaustion, potentially resulting in a Denial of Service DoS...

kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()

A reference leak flaw was found in the Linux kernel's Radeon graphics driver in the BIOS retrieval logic. A local user on systems with AMD Radeon graphics hardware can trigger this issue when the driver searches for ACPI firmware tables and exits the search loop with an acquired PCI device...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

CVE-2023-34431: Improper Input Validation

Improper input validation in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-12974 · Intel · Intel Server Board M10Jnp2Sb

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB BIOS firmware versions prior to 7.219 Description: The issue is related to improper buffer restrictions in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via...

CVE-2023-25756: Out-of-bounds Read

Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2023-22329: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

Intel Server Board and Server System BIOS firmware security vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

CVE-2023-39535: Improper Input Validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2022-33945: Improper Input Validation

Improper input validation in some IntelR Server board and IntelR Server System BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...