2026.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Active Management Technology Intel® AMT and some Intel® Standard Manageability may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details:...

PT-2026-70286

Name of the Vulnerable Software and Affected Versions IntelR Active Management Technology IntelR AMT affected versions not specified IntelR Standard Manageability affected versions not specified Description Improper initialization in the firmware may allow an information disclosure. A system...

PT-2026-70279

Name of the Vulnerable Software and Affected Versions IntelR AMT and IntelR Standard Manageability affected versions not specified Description An issue in the subsystem for IntelR AMT and IntelR Standard Manageability allows the insertion of sensitive information into log files, which may lead to...

AZL-94913 CVE-2026-68152 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

CVE-2026-68302

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

UBUNTU-CVE-2026-68152

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

CVE-2026-68152

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

UBUNTU-CVE-2026-68302

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

CVE-2026-68302 amt: re-read skb header pointers after every pull

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

CVE-2026-68152

The CVE-2026-68152 issue affects the Linux kernel AMT driver. A race during device removal can let delayed works access freed amt_dev memory, risking kernel crashes or memory corruption.Root cause: pending delayed works may be re-queued after cancellation (amt_dev_stop) via event_wq, accessing fr...

CVE-2026-68152 amt: fix use-after-free in AMT delayed works

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

CVE-2026-68152 amt: fix use-after-free in AMT delayed works

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

Linux Distros Unpatched Vulnerability : CVE-2026-68302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT...

Linux Distros Unpatched Vulnerability : CVE-2026-68152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: amt: fixed a possible memory leak in amtrcv If amt receives packets and finds a socket; if it cannot find a socket, it should free the received skb. However, this is not done, resulting in a possible memory leak...

Malicious code in amt-package-united-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f8cf1c89ae16f5297d8a873529f5ba61b4d746f1f79667f803c96bf92507f The package amt-package-united-icons was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1304 Malicious code in amt-package-united-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f8cf1c89ae16f5297d8a873529f5ba61b4d746f1f79667f803c96bf92507f The package amt-package-united-icons was found to contain malicious code. Source: ghsa-malware...

CVE-2025-32008

Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-32008

Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-32008

Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...