CLSA-2025-1750172760 kernel: Fix of 4 CVEs

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit CVE-2022-49478 - x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 - cifs: fix potential double free during failed mount CVE-2022-49541 - drm/amd/pm: fix double free in siparsepowertable CVE-2022-49530...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fixed the return value of applymicrocodeamd. When verifysha256digest fails, applymicrocodeamd should propagate the failure by returning false rather than -1, which is promoted to true...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed out-of-bound accesses WHAT & HOW hpostreamtolinkencodermapping has a size of MAXHPODP2ENCODERS =4, but its location can be up to 6 in size. As a result, it is necessary to check the location against...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: The default value for “denominator” is initialized to 1. WHAT & HOW Variables that are used as denominators and may not be assigned to other values should be initialized to a non-zero value to avoid “DIVIDEBYZERO...

Astra Linux – Vulnerability in amd64-microcode

Improper signature verification in the AMD CPU ROM microcode patch loader may allow an attacker with local administrator privileges to load malicious CPU microcode, resulting in a loss of confidentiality and integrity for confidential guests running under AMD SEV-SNP...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: Unnecessary driverlock has been removed from the setboost function. setboost is a function call per policy; therefore, a driver-wide lock is unnecessary. Additionally, this mutexacquire operation may conflict...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fixed an out-of-bounds access on systems with CPU-less NUMA nodes. Currently, the loadmicrocodeamd function iterates over all NUMA nodes, retrieves their CPU masks, and accesses per-CPU data for the first CPU o...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Avoid buffer overflow attacks in the smusyssetpptable function. If a malicious user provides a smaller pptable through sysfs, followed by a larger one, it may lead to a buffer overflow attack in the smusyssetpptable...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: check stream id dml21 wrapper to get planeid Why & How Fixed a false positive warning that occurs due to lack of correct checks when querying planeid in DML21. This fixes the warning that appears when performi...

TencentOS Server 2: linux-firmware (TSSA-2024:0042)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 3: linux-firmware (TSSA-2024:0218)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0218 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 2: linux-firmware (TSSA-2023:0274)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0274 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 4: linux-firmware (TSSA-2024:0602)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0602 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

[SECURITY] Fedora 41 Update: rust-sevctl-0.6.2-3.fc41

Administrative utility for AMD SEV...

[SECURITY] Fedora 41 Update: rust-sev-6.1.0-2.fc41

Library for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sevctl-0.6.2-3.fc42

Administrative utility for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sev-6.1.0-2.fc42

Library for AMD SEV...

Malicious code in @biovia/amd-loader (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-0037

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...

CVE-2025-0036

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...