HPESBCR04892 rev.1 - Certain HPE ProLiant Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7029: AMD Transient Scheduler Attacks, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Privileged Information, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade - Prior to 2.1.0 in HFP 25.2.1 HPE Cray EX235n Server - Prior to 1.5.3 in HFP 25.5.0 HPE Cr...

CVE-2024-22441

HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...

CVE-2024-51765

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2022-28620

A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

CVE-2025-27087

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-27087

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-37088

A security vulnerability exists in HPE Cray Data Virtualization Service (DVS) , where specific race conditions and configuration issues can lead to unauthorized local or cluster access . The vulnerability is characterized as a concurrency issue involving shared resources with improper synchroniza...

CVE-2025-27087

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

CVE-2025-27087

The Cray Operating System (COS) kernel contains a vulnerability involving improper cleaning or release of resources . This flaw could allow a local attacker to trigger a service failure, resulting in a local Denial of Service (DoS) attack. While the specific affected versions are not provided in ...

CVE-2025-27087

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

PT-2025-17595 · Cray · Cray Operating System

Name of the Vulnerable Software and Affected Versions: Cray Operating System COS affected versions not specified Description: A vulnerability in the kernel of the Cray Operating System could allow an attacker to perform a local Denial of Service DoS attack. Recommendations: At the moment, there i...

Hewlett Packard Enterprise Cray Data Virtualization Service 安全漏洞

Hewlett Packard Enterprise Cray Data Virtualization Service HPE DVS is an application from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Cray Data Virtualization Service that stems from a competitive condition and configuration issue that could resu...

PT-2025-17596 · Hewlett Packard · Hpe Cray Data Virtualization Service

Name of the Vulnerable Software and Affected Versions: HPE Cray Data Virtualization Service DVS affected versions not specified Description: A security issue has been identified in HPE Cray Data Virtualization Service DVS, which may lead to unauthorized local or cluster access under certain...

Hewlett Packard Enterprise Cray Operating System 安全漏洞

The Hewlett Packard Enterprise Cray Operating System COS is a suite of operating systems designed and optimized for supercomputers from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise Cray Operating System that stems from a vulnerability that coul...

CVE-2025-27087: Uncontrolled Resource Consumption

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

CVE-2025-37088: Concurrent Execution using Shared Resource with Improper Synchronization

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...