kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

Investigación de ingeniería inversa SMM del BIOS GIGABYTE H510M K V2 y CVE-2025-7026/7027/7028/7029 Ingeniería inversa estática de una imagen de BIOS GIGABYTE H510M K V2 H510MKV2.F3: extracción completa de volúmenes de firmware UEFI, análisis del asignador de memoria del núcleo SMM de la...

Linux Distros Unpatched Vulnerability : CVE-2026-0438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A System Management Mode SMM handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user...

AMD EPYC 安全漏洞

The AMD EPYC is a high-performance server processor developed by American semiconductor company AMD. There are security vulnerabilities in the AMD EPYC™ 9005 Series Processors and the AMD EPYC™ Embedded 9005 Series Processors. These vulnerabilities stem from improper handling of the segmentation...

CVE-2022-35896

An issue SMM memory leak vulnerability in SMM driver SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure...

CVE-2022-35893

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a new EFI/UEFI specification from Insyde China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from unchecked output buffers and could lead to arbitrary code execution and SMM memory...

EUVD-2021-30529

Malicious code in bioql PyPI...

EUVD-2023-57336

Malicious code in bioql PyPI...

EUVD-2022-38769

Malicious code in bioql PyPI...

EUVD-2022-38766

Malicious code in bioql PyPI...

EUVD-2022-43454

Malicious code in bioql PyPI...

EUVD-2022-43452

Malicious code in bioql PyPI...

EUVD-2023-26749

Malicious code in bioql PyPI...

EUVD-2021-28840

Malicious code in bioql PyPI...

EUVD-2022-28946

Malicious code in bioql PyPI...

EUVD-2023-57335

Malicious code in bioql PyPI...

EUVD-2022-39157

Malicious code in bioql PyPI...

CVE-2025-4422 EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...

CVE-2022-24031

An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM...