SUSE CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

SUSE CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-31074

The CVE affects Intel QAT Engine for OpenSSL. Observable timing discrepancy may disclose information via network access in some Intel QAT Engine for OpenSSL before v1.6.1. Connected advisories indicate fixes are included in QAT Engine 1.7.0, with 1.6.1 release of that line addressing this issue. ...

CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

CVE-2024-28885 (with CVE-2024-31074 and CVE-2024-33617) concerns observable/disclosure risks in Intel(R) QAT Engine for OpenSSL. The vulnerabilities affect Intel QAT Engine for OpenSSL software before version v1.6.1; exploitation is network-accessible. SUSE advisories reference fixes in the 1.7.0...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

CVE-2024-33617 is associated with Intel(R) QAT Engine for OpenSSL. The attached advisories/plugins confirm the vulnerability as: insufficient control flow management in the QAT Engine before version v1.6.1 may allow information disclosure via network access. Affected components in SUSE advisories...

PT-2024-8840

Name of the Vulnerable Software and Affected Versions: IntelR QAT Engine for OpenSSL versions prior to v1.6.1 Description: The issue is related to an observable timing discrepancy in the IntelR QAT Engine for OpenSSL software, which may allow information disclosure via network access. This...

PT-2024-8785

Name of the Vulnerable Software and Affected Versions: Intel QAT Engine for OpenSSL versions prior to v1.6.1 Description: The issue is related to an observable discrepancy in the Intel QAT Engine for OpenSSL software, which may allow information disclosure via network access. This could potential...

Unbreakable Enterprise kernel security update

5.15.0-300.163.18 - crypto: qat - specify firmware files for 402xx Giovanni Cabiddu Orabug: 37044631 5.15.0-300.163.17 - KVM/x86: Do not clear SIPI while in SMM Boris Ostrovsky Orabug: 36955051 - Revert 'Fix userfaultfdapi to return EINVAL as expected' Vijayendra Suman Orabug: 36992217...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

kernel: crypto: qat - resolve race condition during AER recovery

A race condition was found in drivers/crypto/intel/qat/qatcommon/adfaer.c in the Linux kernel during AER recovery...

Unbreakable Enterprise kernel security update

5.15.0-210.163.7 - crypto: qat - specify firmware files for 402xx Giovanni Cabiddu Orabug: 37030280 5.15.0-210.163.6 - Revert 'Fix userfaultfdapi to return EINVAL as expected' Vijayendra Suman Orabug: 37004422 5.15.0-210.163.5 - Revert 'bpf: Allow reads from uninit stack' Vijayendra Suman Orabug:...