HPESBHF04810 rev.1 - HPE ProLiant DX Servers Using OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v3.2005-27-2024 HPE ProLiant DX190r Gen10 server - Prior to v3.2005-27-2024 HPE ProLiant DX360 Gen10...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56623)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56623 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after free on...

HPESBHF04826 rev.2 - Certain HPE ProLiant DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7033: AMD CPU Microcode Signature Verification, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.4001-17-2025 HPE ProLiant DL325 Gen11 Server - Prior to v2.4003-21-2025 HPE ProLiant DL365 Gen11 Server - Prior to v2.4003-21-2025 HPE...

Linux Distros Unpatched Vulnerability : CVE-2024-58005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id...

Linux Distros Unpatched Vulnerability : CVE-2024-26931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: scsi: qla2xxx: Fix command flush on cable pull Ubuntu Linux - scsi: qla2xxx: Fix command flush on cable pull System crash due...

SUSE CVE-2024-58005

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

AZL-57857 CVE-2024-58005 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

CVE-2024-58005

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

CVE-2024-58005

CVE-2024-58005 in the Linux kernel has concrete details in the connected documents: the root cause is a memory allocation path in the TPM eventlog ACPI handling that could allocate an oversized 16 MiB buffer due to how the order parameter is mapped. The patched fix changes the allocation strategy...

CVE-2024-58005 tpm: Change to kvalloc() in eventlog/acpi.c

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

CVE-2024-58005

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

CVE-2024-58005 tpm: Change to kvalloc() in eventlog/acpi.c

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

CVE-2024-58005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: 10.693310 T1 tpmtis STM0925:00: 2.0 TPM device-id 0x3, rev-id 0 10.848132 T1 ------------ cut here ------------ 10.853559 T1...

HPESBHF04799 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01194, UPLR3 Intel Data Streaming Accelerator Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 -Prior to v2.4401-17-2025 HPE Alletra 4120 -Prior to v2.4401-17-2025 HPE Alletra 4140 -Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 -Prior to v2.4401-17-20...

HPESBHF04782 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7027: AMD System Management Mode (SMM) Vulnerabilities, Local Arbitrary Code Execution Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.3010-04-2024 HPE ProLiant DL325 Gen11 Server - Prior to v1.7009-06-2024 HPE ProLiant DL345 Gen11 Server - Prior to v1.7009-06-2024 HPE...

HPESBHF04794 rev.2 - Certain HPE ProLiant DL/ML, Alletra, Apollo, Edgeline, MicroServer and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01213, 2025.1 IPU - Intel SGX Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04792 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01166, 2024.4 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04790 rev.2 - Certain HPE ProLiant DL/ML/XL, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01139, 2025.1 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110...

HPESBHF04786 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.4010-04-2024 HPE ProLiant XL225n Gen10 Plus 1U Node - Prior to v3.4010-04-2024 HPE ProLiant XL645d Gen10 Plus Server - Prio...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42071)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42071 advisory. - In the Linux kernel, the following vulnerability has been resolved: ionic: use devconsumeskbany outside of...