CVE-2023-41833

A race condition in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23599

Race condition in Seamless Firmware Updates for some IntelR reference platforms may allow a privileged user to potentially enable denial of service via local access...

PT-2024-7323 · Intel +1 · Intel Uefi Firmware +1

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in the UEFI firmware of certain Intel processors. This flaw may allow a privileged user to potentially enable escalation of...

Important: Red Hat Bug Fix Advisory: linux-firmware bug fix update

An update for linux-firmware is now available for Red Hat Enterprise Linux 9. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Bug Fixes: Intel 9.5 FEAT SRF QAT402XX firmware update rhel-9.4.z JIRA:RHEL-47356...

CVE-2024-21844

Integer overflow in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-40067

Unchecked return value in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2023-40067

CVE-2023-40067 concerns an unchecked return value in firmware of some Intel® CSME. The advisory indicates unauthenticated local access could potentially enable privilege escalation with a physical access requirement. Documented impact from CVSS 3.1/4.0 both show a base score of 5.7 (Medium) with ...

RHEL 7 : microcode_ctl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kernel: Intel firmware update for improper isolation of shared resources CVE-2022-38090 - Incorrect...

CVE-2023-28383

Improper conditions check in some IntelR BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access...

Intel BIOS Guard firmware 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on boot phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS Guard firmware that stems from t...

Intel BIOS PPAM 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on startup phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS PPAM firmware that stems from...

PT-2024-2525 · Intel · Intel Sps Firmware

Name of the Vulnerable Software and Affected Versions: Intel SPS firmware affected versions not specified Description: The issue is related to uncontrolled resource consumption in some Intel SPS firmware versions, which may allow a privileged user to potentially enable denial of service via netwo...

CVE-2023-29153

Uncontrolled resource consumption for some IntelR SPS firmware before version SPSE506.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-28743

Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-29495

Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28738

Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

kernel: Intel firmware update for Incorrect default permissions in some memory controller configurations

A flaw was found in the Linux kernel. Some IntelR XeonR processors with Intel® Software Guard Extensions SGX may allow privilege escalation. This issue may allow a privileged user to enable privilege escalation via local access...

Important: Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

RHEL 8 : Red Hat Virtualization Host 4.4.z SP 1 (RHSA-2023:5209)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5209 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...

CVE-2022-38102

Improper Input validation in firmware for some IntelR Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access...