CVE-2026-10588

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

CVE-2026-10588

Technical details (affected products/components/root cause/fix) are not provided in the supplied documents. Monitor Lenovo advisories and CVE records for updates.

CVE-2026-10588

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

EUVD-2026-44980

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

CVE-2026-10588

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

CVE-2026-10587

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

CVE-2026-10587

CVE-2026-10587 is described in connected documents as a potential out-of-bounds write vulnerability that could allow a local privileged attacker to modify power management settings in System Management Mode. The root cause is an out-of-bounds write; impact is indicated as high on integrity and av...

CVE-2026-10587

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

EUVD-2026-44979

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

CVE-2026-10587

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

PT-2026-60510

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

PT-2026-60512

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode...

PT-2026-60511

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

CVE-2026-10589: Out-of-bounds Write

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode...

CVE-2026-10590: Undefined Security Weakness

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...

CVE-2026-10588: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

CVE-2026-10587: Out-of-bounds Write

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

Moderate: freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client CVE-2026-50031 For more details about the...

CVE-2026-52948

A flaw was found in the Linux kernel's I2C Inter-Integrated Circuit subsystem. A malicious local user can exploit an integer overflow vulnerability in the I2CTIMEOUT ioctl. By providing a large timeout value, the multiplication by 10 causes an overflow, leading to a truncated value. This results ...

SUSE CVE-2026-52948

In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent scheduletimeout: wrong timeout value warning was observed, accompanied by SMBus controller state machine corruption. The I2CTIMEOUT...