The vulnerability of the FSM component of Intel microprogramming systems, which allows a hacker to trigger a service failure.

The vulnerability of the FSM component in Intel microprogramming systems relates to the checking of incorrect conditions. Exploiting this vulnerability can allow attackers to cause malfunctions in the system’s operation...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2024-12782)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12782 advisory. - VMCI: Fix use-after-free when removing resource in vmciresourceremove David Fernandez Gonzalez Orabug: 37037205 CVE-2024-46738 - exec: Fix ToCTo...

CVE-2024-42276

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

SUSE CVE-2024-42276

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

DEBIAN-CVE-2024-42276

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

CVE-2024-42276

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

CVE-2024-42276

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

CVE-2024-42276

Technical details for CVE-2024-42276 are not provided in the connected documents. The initial description notes a Linux kernel nvme-pci fix, but no product/vendor/version specifics are disclosed here. Monitor for updates.

CVE-2024-42276 nvme-pci: add missing condition check for existence of mapped data

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

CVE-2024-42276 nvme-pci: add missing condition check for existence of mapped data

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

CVE-2024-42276 nvme-pci: add missing condition check for existence of mapped data

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvmemapdata is called when request has physical segments, hence the nvmeunmapdata should have same condition to avoid dereference...

CVE-2023-47165

Improper conditions check in the IntelR Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of service via local access...

PT-2024-12157 · Intel · Intel Bios Ppam Firmware

Name of the Vulnerable Software and Affected Versions: IntelR BIOS PPAM firmware affected versions not specified Description: The issue is related to an improper conditions check in the IntelR BIOS PPAM firmware, which may allow a privileged user to potentially enable escalation of privilege via...

PT-2024-19067 · Intel · Intel Quartus Prime Lite Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an improper conditions check in the software, which may allow an authenticated user to potentially enable escalation of privilege v...

PT-2024-12727

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to an improper conditions check in the IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enabl...

wrong sets of weth/dpxEth balance leads to incorrect calculation

Lines of code Vulnerability details impact In the curveSwap function, there is a crucial condition check to determine the values of a and b. If coin0 is equal to weth, the values should be set as 0, 1 or a, b. If not, they should be set as b, a. However, there is a discrepancy in the way these...

Mitigation of M-10: Issue not mitigated

MITIGATION IS NOT CONFIRMED MITIGATION IS NOT CONFIRMED Mitigation of M-10: Issue not mitigated Link to Issue: code-423n4/2023-03-asymmetry-findings363 Comments Even though the protocol team applied the warden's recommendation in M-10, the feature to enable/disable derivatives added as a mitigati...

Input validation

Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-36794

Intel SPS firmware CVE-2022-36794: a root cause is an improper condition check in Intel SPS firmware prior to SPS_E3_06.00.03.300.0, which could allow a privileged user to cause a local denial of service. Affected versions are affected before the stated SPS_E3_06.00.03.300.0, and mitigation is to...

Intel SPS 代码问题漏洞

Intel SPS is a server platform service from Intel Corporation USA. A security vulnerability exists in versions prior to IntelR SPS firmware SPSE306.00.03.300.0, which stems from an incorrect condition check. An attacker could exploit the vulnerability to cause a denial of service on the system...