SUSE-SU-2023:4442-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release labeled 20231113. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. bsc1215278...

SUSE-SU-2023:4441-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release labeled 20231113. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. bsc1215278...

SUSE-SU-2023:4440-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release labeled 20231113. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. bsc1215278...

AMD INVD Instruction Security Notice

Bulletin ID: AMD-SB-3005 Potential Impact: Memory integrity Severity: Medium Summary External researchers reported a potential vulnerability with the INVD instruction that may lead to a loss of SEV-ES and SEV-SNP guest virtual machine VM memory integrity. CVE Details Refer to Glossary for...

2023.4 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege and/or information disclosure and/or denial of service via local access. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-235...

microcode_ctl security update

4:20230808-2.0.2 - update 06-6a-06 to 0xd0003b9 CVE-2023-23583...

Intel Microcode Buffer Overflow DoS

The vulnerability of Intel Microcode processors lies in the possibility that backup equipment may malfunction due to unauthorized introduction of errors. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and even cause service...

Intel Microcode Information Disclosure

The vulnerability of Intel Microcode processors relates to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to confidential data...

linux-firmware security update

20230516-999.27.git6c9e0ed5.el9 - Update firmware for qat4xxx devices Orabug: 35811008 20230516-999.26.git6c9e0ed5.el9 - Run dracut -f in %posttrans instead of %post Orabug: 35661938 - Drop latest AMD microcode commits to family 19 file to include Milan microcode but not Genoa Orabug: 35708511...

MediaTek IOMMU Memory Management Unauthorized Access

The vulnerability of the memory management block for IOMMU input/output operations in MediaTek’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

USN-6244-1: AMD Microcode vulnerability | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could...

USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A...

kernel security update

4.18.0-477.27.1.el88.OL8 - x86/microcode/intel: Expose collectcpuinfoearly for IFS - x86/cpu: Load microcode during restoreprocessorstate - x86/microcode: Deprecate MICROCODEOLDINTERFACE - x86/microcode: Rip out the OLDINTERFACE - x86/microcode: Default-disable late loading - x86/microcode: Taint...

kernel security update

5.14.0-284.30.1.el92 - x86/microcode/intel: Expose collectcpuinfoearly for IFS - x86/cpu: Load microcode during restoreprocessorstate - x86/microcode: Rip out the OLDINTERFACE - x86/microcode: Default-disable late loading - x86/microcode: Taint and warn on late loading - x86/microcode: Remove...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to a denial of service due to use of Apache Commons FileUpload (CVE-2023-24998)

Summary IBM Virtualization Engine TS7700 is susceptible to a denial of service due to use of Apache Commons FileUpload CVE-2023-24998. Apache Commons FileUpload is used by the TS7700 in the Management Interface. IBM Virtualization Engine TS7700 has addressed the applicable CVE. Vulnerability...

CLSA-2023-1694109668 Fix CVE(s): CVE-2023-20593, CVE-2023-20569

New microcode update packages from AMD upstream up to 2023-08-08: + New Microcodes for 19h family: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f01, sig 0x00aa0f02; SECURITY UPDATE: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction...

CLSA-2023-1694109571 Fix CVE(s): CVE-2023-20569, CVE-2023-20593

New microcode update packages from AMD upstream up to 2023-08-08: + New Microcodes for 19h family: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f01, sig 0x00aa0f02; SECURITY UPDATE: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 8. The microcodectl packages provide microcode updates for Intel processors. Bug Fixes and Enhancements: Update Intel CPU microcode to microcode-20230214 release, which addresses CVE-2022-40982, CVE-2022-41804, and...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. The microcodectl packages provide microcode updates for Intel processors. Bug Fixes and Enhancements: Update Intel CPU microcode to microcode-20230808 release, which addresses CVE-2022-40982, CVE-2022-41804, and...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel processors...