SUSE-SU-2022:2960-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

HPESBHF04344 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE ProLiant XL290n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE Apollo 2000 Gen10 Plus System - Prior to...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the KVM SEV API that allows a non-root host user-level application to crash the host kernel by creating an...

Ubuntu: Security Advisory (USN-5484-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4182-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-390-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Intel BIOS Disclosure

The vulnerability of the BIOS microprogramming system of Intel processors is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to disclose protected information...

graphics processor driver Privilege Escalation

The vulnerability of the kbasejduserbufpinpages function malikbasemem.c in the graphics processor driver for Android devices from Google Pixel devices is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

SUSE-SU-2022:2838-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

CVE-2022-26373

CVE-2022-26373 concerns Intel processors where non-transparent sharing of return-predictor targets between contexts may allow an authorized local user to disclose information. The provided documents describe this issue as a local-information-disclosure risk but do not specify a vendor patch/versi...

SUSE-SU-2022:2833-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

PT-2022-6092

Name of the Vulnerable Software and Affected Versions Arm Mali GPU kernel driver versions Bifrost r0p0 through r39p0 Arm Mali GPU kernel driver versions Valhall r19p0 through r39p0 Arm Mali GPU kernel driver versions Midgard r4p0 through r32p0 Description The issue is related to the mishandling o...

AMD Processor Execution Unit Scheduler Contention Side-Channel Vulnerability - Lenovo Support US

No description provided...

UBUNTU-CVE-2022-21233

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

HPESBHF04347 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 CVS...

HPESBHF04342 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6007-14-2022 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.6207-14-2022 HPE ProLiant DL360 Gen10 Plus server - Pri...

com.dslplatform:dsl-clc (>=1.6.2, <=1.7.2), com.dslplatform:dsl-json-processor (>=0.8, <=1.2) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.4.1208.jre6)

org.postgresql:postgresql MAVEN version 9.4.1208.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.6.2, =0.8, =0.7, =0.9 Source cves: CVE-2022-31197 Source advisory:...

com.dslplatform:dsl-clc (>=1.8.3, <=1.9.0), com.dslplatform:dsl-json-processor (>=1.4.1, <=1.4.6) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.4.1212.jre6)

org.postgresql:postgresql MAVEN version 9.4.1212.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.8.3, =1.4.1, =1.1.0, =1.2.0 Source cves: CVE-2022-31197 Source advisory:...