9440 matches found
PT-2025-37220
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw where a null pointer dereference could occur within the drm/amd/display module. This issue was addressed by adding a null check to enhance function...
Ubuntu 25.04 : AMD Microcode vulnerability (USN-7560-1)
The remote Ubuntu 25.04 host has a package installed that is affected by a vulnerability as referenced in the USN-7560-1 advisory. Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo discovered that AMD Microcode incorrectly verified signatures. An attacker with local...
CVE-2025-0037
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...
CVE-2025-0036
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
CVE-2025-0036: Incorrect Calculation
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
CVE-2025-0037: Improper Input Validation
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...
Ubuntu 24.04 LTS / 24.10 : AMD Microcode vulnerabilities (USN-7561-1)
The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7561-1 advisory. It was discovered that AMD Microcode incorrectly handled memory addresses. An attacker with local administrator privilege could possibly use this...
CVE-2025-0036
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
CVE-2025-0036
The CVE concerns AMD Versal Adaptive SoC devices where the Secure Stream Switch (SSS) configuration is not cleared after a cryptographic operation in the Platform Loader and Manager (PLM) during post-boot runtime. This improper SSS setup can lead to data being written to or read from invalid memo...
CVE-2025-0036
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
CVE-2025-0037
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...
CVE-2025-0037
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...
CVE-2025-0037
The CVE-2025-0037 issue affects AMD Versal Adaptive SoC devices, arising from lack of address validation when PLM runtime services are executed via the PLM firmware. This could allow a remote processor to access isolated or protected memory spaces, compromising confidentiality and integrity (impa...
USN-7561-1: AMD Microcode vulnerabilities
It was discovered that AMD Microcode incorrectly handled memory addresses. An attacker with local administrator privilege could possibly use this issue to cause loss of integrity of a confidential guest running under AMD SEV-SNP. CVE-2023-20584, CVE-2023-31356 Josh Eads, Kristoffer Janke, Eduardo...
USN-7560-1: AMD Microcode vulnerability
Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo discovered that AMD Microcode incorrectly verified signatures. An attacker with local administrator privilege could possibly use this issue to cause loss of confidentiality and integrity of a confidential guest running unde...
Linux amd_get_mmconfig_range Heap Buffer Overflow Info Disclosure
The vulnerability of the amdgetmmconfigrange function in the arch/x86/kernel/amdnb.c module of Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
PT-2025-24579 · Amd · Amd Versal Adaptive Soc
Name of the Vulnerable Software and Affected Versions: AMD Versal Adaptive SoC devices affected versions not specified Description: The issue arises from the incorrect configuration of the Secure Stream Switch SSS during runtime, specifically after the system has booted, which could cause data to...
PT-2025-48916
Уязвимость прошивки Platform Loader and Manager PLM микропрограммных устройств AMD Versal и Alveo вызвана отсутствием сброса конфигурации Secure Stream Switch SSS после выполнения криптографических операций. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ...
PT-2025-55230
Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10ver:0x08701034, cpuid:0x00860F01ver:0x0860010D, cpuid:0x00860F81ver:0x08608108; - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206,...
Linux Kernel DoS
The vulnerability of the perf/x86/amd kernel components in the Linux operating system is related to integer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure...