7028 matches found
hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions
A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions...
hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)
A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
kernel: NULL pointer dereference in x86_emulate_insn may lead to DoS
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU...
hw: cpu: information disclosure in certain Intel processors
A flaw was found in hw. Processor optimization removal or modification of security-critical code for some IntelR processors may potentially allow an authenticated user to enable information disclosure via local access...
PT-2022-35837 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility ha...
PT-2022-35299 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility hav...
PT-2022-35030 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility have...
PT-2022-35758 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility ha...
CVE-2022-26006
CVE-2022-26006 describes an vulnerability in the BIOS firmware for some Intel processors caused by improper input validation, which could allow a privileged user to escalate privileges via local access. The issue is documented by Intel under INTEL-SA-00688 and is reflected in Nessus/F5 advisories...
CVE-2022-20943
Multiple vulnerabilities in the Server Message Block Version 2 SMB2 processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service DoS condition on an affected device. These...
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...
CVE-2021-26393
Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...
CVE-2020-12931
Improper parameters handling in the AMD Secure Processor ASP kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...
CVE-2021-26360
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP...
CVE-2020-12931
Improper parameters handling in the AMD Secure Processor ASP kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...
CVE-2021-26360
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP...
CVE-2020-12930
Improper parameters handling in AMD Secure Processor ASP drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...
CVE-2020-12930
Improper parameters handling in AMD Secure Processor ASP drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...
Design/Logic Flaw
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP...