ALSA-2024:9401 Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: local privilege escalation on Intel microcode on IntelR XeonR CVE-2023-22655 kernel: Local information disclosure on IntelR AtomR processors CVE-2023-28746 kernel: Local information disclosur...

PT-2024-8768 · Intel · Intel Actm

Name of the Vulnerable Software and Affected Versions: IntelR processors with IntelR ACTM affected versions not specified Description: The issue is related to the exposure of a resource to the wrong sphere in some IntelR processors with IntelR ACTM, which may allow a privileged user to potentiall...

HPESBHF04739 rev.1- Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01101, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to v2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to v2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to v2.3008-09-2024 HPE StoreEa...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

Important: microcode_ctl

Issue Overview: Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-21820 Improper finite state machines FSMs in the hardware logic ...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

More than six years after the Spectre security flaw impacting modern CPU processors came to light, new research has found that the latest AMD and Intel processors are still susceptible to speculative execution attacks. The attack, disclosed by ETH Zürich researchers Johannes Wikner and Kaveh...

The vulnerability of the UEFI Firmware component of Intel microprocessors lies in the lack of protection during the assignment of pointers; this allows attackers to exploit their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors lies in the lack of checks for the value of the pointer before it is reassigned. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to writing beyond the buffer boundaries, allows attackers to enhance their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the RAPL Interface microprogramming software for Intel processors lies in the ability to disclose information through incompatibility, allowing attackers to compromise the protected information.

The vulnerability of the RAPL Interface microprogramming software for Intel processors involves the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to resource release errors, allows a hacker to cause a system failure.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

ABB Cylon Aspect 3.08.02 logYumLookup.php Authenticated File Disclosure Vulnerability

ABB Cylon Aspect version 3.08.02 suffers from an authenticated arbitrary file disclosure vulnerability. Input passed through the logFile GET parameter via the logYumLookup.php script is not properly verified before being used to download log files. This can be exploited to disclose the contents o...

HPESBHF04718 rev.1 - HPE Superdome Flex 280 Servers Using Intel Processors, INTEL-SA-01118, 2024.3 IPU - 3rd Generation Intel Xeon Scalable Processor Advisory

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v1.90.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-25939 |...

HPESBHF04715 rev.1 - HPE Superdome Flex and Superdome Flex 280 servers Using Certain Intel Processors, INTEL-SA-01071, 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v1.90.12 HPE Superdome Flex Server - Prior to v4.0.10 CVSS Scores: | CVE | CVSS Vect...