CVE-2021-26342

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for...

Code injection

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for...

AMD CPUs 安全漏洞

AMD CPUs are a family of CPUs from AMD in the United States. AMD CPUs suffers from a security vulnerability that stems from the fact that failure to refresh the TLB can cause the microcode to use an outdated TLB, thus leaking memory contents...

ALBA-2022:2112 microcode_ctl bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

PT-2022-3789 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to deficiencies in handling exceptional states in the BIOS microcode of Intel processors. It may allow a privileged user to potentially enable escalation of...

Insecure Cryptographic Function

amd64-microcode has insecure cryptographic function. The vulnerable exists due to an insecure cryptographic implementation...

microcode_ctl bug fix and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: Update Intel CPU microcode to the microcode-20220204 release, which addresses CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 BZ2049541, BZ2049553, BZ2049570...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed Plus Line Cards DoS (cisco-sa-lsplus-Z6AQEOjk)

According to its self-reported version, Cisco IOS XR is affected by denial of service vulnerability due to a vulnerability in the data plane microcode of Lightspeed-Plus line cards that cause the line card to reset. An unauthenticated, remote attacker can exploit these by sending a specific IPv4 ...

Slackware: Security Advisory (SSA:2018-208-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2022-1650376845 Update of microcode_ctl

Update Intel CPU microcode to microcode-20220207 release: - Fixes in releasenote.md file...

Update of microcode_ctl

Update Intel CPU microcode to microcode-20220207 release: - Fixes in releasenote.md file...

CVE-2022-20714

A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card to reset. This vulnerability is due to the incorrect handling of malformed packets that are...

CVE-2022-20714

CVE-2022-20714 affects Cisco IOS XR on ASR 9000 Series Lightspeed-Plus line cards (e.g., ASR 9902/9903). The issue is in the data plane microcode where malformed IPv4/IPv6 packets can trigger a line card reset, causing DoS for traffic traversing the card. Exploitation requires no authentication. ...

PT-2022-1954 · Intel +8 · Intel Processors +8

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to errors in parameter processing in the implementation of the Intra-mode BTI IMBTI mode of Intel processor microcode. It may allow an authorized user to...

Important: microcode_ctl

Issue Overview: A flaw was found in microcode. Under complex microarchitectural conditions, an unexpected code breakpoint may cause a system hang. The hang was observed on a Skylake server processor, and subsequent analysis indicated additional potentially affected processors. This flaw allows a...

Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect IBM Virtualization Engine TS7700 - October 2021

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, as used by IBM Virtualization Engine TS7700. These issues were disclosed as part of the IBM Java SDK updates in October 2021. IBM Virtualization Engine TS7700 has addressed the applicable CVEs. Vulnerabili...

The vulnerability of BIOS microprogramming systems in Dell laptops, related to insufficient verification of data authenticity, allows attackers to gain unauthorized access to protected information.

The vulnerability of BIOS microprogramming systems in Dell laptops is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

SUSE: Security Advisory (SUSE-SU-2022:0576-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information Disclosure

intel-microcode is vulnerable to information disclosure. The vulnerability exists due to the improper initialization of shared resources in some IntelR Processors, allowing an attacker to gain sensitive information via local access...