Linux kernel code vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a code issue vulnerability that stems from a NULL pointer dereference problem in kvmirqdeliverytoapicfast. An attacker exploiting this vulnerability could trigger a denial of...

CVE-2022-26864

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...

CVE-2022-26862

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...

PT-2022-3069

Name of the Vulnerable Software and Affected Versions Dell BIOS versions affected versions not specified Description The issue is related to insufficient input validation in the BIOS software of Dell laptops. This could allow a malicious user to execute arbitrary code by sending malicious input t...

CVE-2021-35101

Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile...

Qualcomm chip security vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualcomm products th...

CVE-2022-24417

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

Dell BIOS input validation error vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...

Dell BIOS input validation error vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...

Lenovo SMI Driver Reverse Trigger Code Execution

The vulnerability of the reverse-trigger function of the System Management Interrupt SMI driver for Legacy BIOS notebook computers of Lenovo is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

Lenovo ThinkStation SMBIOS Event Logger Reverse Trigger Code Execution

The vulnerability of the reverse-trigger function of the System Management Interrupt handler in SMBIOS event log drivers for Lenovo ThinkStation workstations, Lenovo ThinkEdge computers, and Lenovo Desktop systems is related to insufficient validation of input data. Exploiting this vulnerability...

CVE-2022-24418

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24417

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2021-39298

A potential vulnerability in AMD System Management Mode SMM interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware...

CVE-2022-28806

An issue was discovered on certain Fujitsu LIEFBOOK devices A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449 with BIOS versions before v1.09 A3510, v2.17 U9310, v2.30 U7511/U7411/U7311, v2.33 U9311, v2.23 E5510, v2.19 U7510/U7410, v2.13 U7310, and v1.09 E459/E449...

FUJITSU LIEFBOOK devices: Buffer error vulnerabilities

The FUJITSU LIEFBOOK devices are a laptop computer from Fujitsu FUJITSU Japan. A buffer error vulnerability exists in multiple versions of FUJITSU LIEFBOOK, which stems from the FJGABIFlashCoreAxtractionSMM driver registering a Software System Management Interrupt SWSMI handler that is not...

GSD-2022-1001821 ice: fix 'scheduling while atomic' on aux critical err interrupt

ice: fix 'scheduling while atomic' on aux critical err interrupt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

PT-2022-30091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.32 Description A potential issue exists in the Linux Kernel's ethernet driver, specifically in the cpsw component, which could lead to a panic when interrupt coalescing is set via ethtool. The actual...

PT-2022-30094

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a 'scheduling while atomic' error on aux critical err interrupt. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists in the Linux Kernel, specifically in the ethernet cpsw driver, where a panic can occur when interrupt coalescing is set via ethtool. The actual impact and attack...