CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

CVE-2021-26400

CVE-2021-26400 concerns AMD processors where speculative re-ordering of load instructions can cause stale data to be observed across multiple CPUs accessing shared memory, enabling potential data leakage. The connected AMD bulletin AMD-SB-1035 documents the issue as Speculative Load Disordering w...

AMD processors 安全漏洞

AMD Processors is a processor from the American company AMD. AMD processors suffers from a security vulnerability that stems from the fact that AMD processors can infer load instructions, leading to a potential data leak...

PT-2022-3803 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to insufficient control flow management in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

AMD EPYC SEV-ES TMR 安全漏洞

AMD EPYC is an x86 server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC SEV-ES TMR. An attacker could exploit this vulnerability to cause a loss of memory integrity in SNP-active VMs...

AMD EPYC DRTM UApp 安全漏洞

AMD EPYC is an x86 architecture server microprocessor product line from AMD Semiconductor, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in the AMD EPYC DRTM UApp. The vulnerability arises from a partial initialization of the DRTM UApp, which...

Ciphertext Side Channels on AMD SEV

Bulletin ID: AMD-SB-1033 Potential Impact: Data leakage Severity: Medium Summary AMD received notification of a potential security vulnerability where data in specific cryptographic algorithms can be inferred in a SEV guest by monitoring the ciphertext values over time. Researchers from the...

NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0046)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcodectl packages installed that are affected by multiple vulnerabilities: - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-129-01)

The version of kernel-generic installed on the remote host is prior to 5.15.38 / 5.15.38smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-129-01 advisory. - Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may...

PT-2022-4314 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some Intel Processors. This may allow a privileged user to potentially enable escalation of privilege via...

PT-2022-3790 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to the use of an out-of-range pointer offset in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalatio...

PT-2022-4323 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an observable behavioral discrepancy in some IntelR Processors, which may allow an authorized user to potentially enable information disclosure via local...

PT-2022-3804 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper access control in the BIOS authenticated code module for some Intel Processors. This may allow a privileged user to potentially enable escalation o...

2022.1 IPU - Intel® Xeon® Advisory

Summary: Potential security vulnerabilities in some Intel® Xeon® Processors may allow information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21131 Description: Improper access control for...

PT-2022-3789 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to deficiencies in handling exceptional states in the BIOS microcode of Intel processors. It may allow a privileged user to potentially enable escalation of...

PT-2022-4322 · Intel +3 · 3Rd Generation Intel Xeon Scalable Processors +3

Name of the Vulnerable Software and Affected Versions: 3rd Generation IntelR XeonR Scalable Processors versions before MR7 Description: The issue is related to improper access control in the BIOS microcode of Intel processors, which may allow a local attacker to potentially enable information...

Intel 2022.1 IPU BIOS Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® Processors, in BIOS firmware or BIOS authenticated code module for some Intel® Processors, and in the Intel® Software Guard Extensions SGX Platform which may allow escalation of privilege, information disclosure...

PT-2022-3825 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an out-of-bounds write in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...

NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0034)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcodectl packages installed that are affected by multiple vulnerabilities: - Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...

NewStart CGSL MAIN 6.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0060)

The remote NewStart CGSL host, running version MAIN 6.02, has microcodectl packages installed that are affected by multiple vulnerabilities: - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable...