UBUNTU-CVE-2026-23062

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GETINSTANCEID macro The GETINSTANCEID macro that caused a kernel panic when accessing sysfs attributes: 1. Off-by-one error: The loop condition used 'name without checking if...

CVE-2026-23062 platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GETINSTANCEID macro The GETINSTANCEID macro that caused a kernel panic when accessing sysfs attributes: 1. Off-by-one error: The loop condition used 'name without checking if...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005116 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check BIOS images before it is used BIOS images may fail to load and null checks...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004831 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38332)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38332 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41084)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41084 advisory. - In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereferen...

CVE-2026-0421

A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode...

EUVD-2026-2664

A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...

CVE-2026-0421

A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode...

CVE-2026-0421

CVE-2026-0421 involves Lenovo ThinkPad BIOS where Secure Boot can be turned off even when the BIOS reports it as On, specifically on systems with Secure Boot configured to User Mode. Affected models include ThinkPad L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2. The issue is described as ...

CVE-2025-71118

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if startnode is NULL Although commit 0c9992315e73 "ACPICA: Avoid walking the ACPI Namespace if it is not there" fixed the situation when both startnode and acpigblrootnode are NULL, the Linux...

Lenovo ThinkPad BIOS 安全漏洞

Lenovo ThinkPad BIOS is a program for booting the system of a laptop from the Chinese company Lenovo Lenovo. A security vulnerability exists in the Lenovo ThinkPad BIOS that stems from improper validation of the Secure Boot configuration in the BIOS, which could result in Secure Boot being disabl...

PT-2026-2962

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad L13 Gen 6 Lenovo ThinkPad L13 Gen 6 2-in-1 Lenovo ThinkPad L14 Gen 6 Lenovo ThinkPad L16 Gen 2 Description A potential issue exists in the BIOS of certain Lenovo ThinkPad models that may allow Secure Boot to be disabled, even...

CVE-2025-71101

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hppopulateelementsfrompackage functions in the hp-bioscfg driver contain out-of-bounds array access vulnerabilities. These functions parse ACPI...

Multi-Vendor BIOS Security Vulnerabilities (January, 2026) - Lenovo Support US

No description provided...

Multi-Vendor BIOS Security Vulnerabilities (January, 2026) - Lenovo Support US

No description provided...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from insufficient boundary checking during ACPI packet parsing in the hp-bioscfg driver, which could lead to...

PT-2026-2622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The hp populate elements from package functions within the hp-bioscfg driver contain out-of-bounds array access issues. These functions parse ACPI packages, and a flaw exists in how arra...

CVE-2021-33123

Improper access control in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...