CVE-2023-22329

Improper input validation in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2023-40540

Non-Transparent Sharing of Microarchitectural Resources in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-25756

The CVE-2023-25756 issue affects Intel BIOS firmware across multiple processors, caused by an out-of-bounds read that may allow an authenticated user to escalate privileges via adjacent access. Documents from Intel (INTEL-SA-00924) confirm the vulnerability in BIOS software and propose updates to...

CVE-2023-40540

CVE-2023-40540 relates to Intel® NUC BIOS firmware. Affected component: BIOS firmware on Intel NUC platforms. Issue: Non-Transparent Sharing of Microarchitectural Resources could allow a local-privilege user to disclose information via local access. Root cause described as improper sharing of mic...

CVE-2023-40540

Non-Transparent Sharing of Microarchitectural Resources in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-25756

Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2023-25756

Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2023-40220

Technical details about CVE-2023-40220 are not publicly provided in the provided documents. Monitor for updates from Intel and other vendors for affected products, remediation steps, and evidence of exploit activity.

kernel: Linux kernel: Resource exhaustion in amdgpu due to PCI device reference count leak

A flaw was found in the Linux kernel's drm/amdgpu component. A missing call to pcidevput in the amdgpuatrmgetbios function leads to a PCI device reference count leak. A local attacker could exploit this to cause resource exhaustion, potentially resulting in a Denial of Service DoS...

kernel: drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: fix a memory leak in generatelfpdataptrs When size != 0 || ptrs-lvds entries != 3, the program tries to free the ptrs. However, the ptrs is not created by calling kzmalloc, but is obtained by pointer offset...

kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()

A reference leak flaw was found in the Linux kernel's Radeon graphics driver in the BIOS retrieval logic. A local user on systems with AMD Radeon graphics hardware can trigger this issue when the driver searches for ACPI firmware tables and exits the search loop with an acquired PCI device...

kernel: drm/radeon: Add the missed acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios information from ACPI table in radeonacpivfctbios, it misses to call acpiputtable to release the ACPI memory after the init, so add...

PT-2023-12966 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Board BIOS firmware affected versions not specified Description: The issue is related to improper buffer restrictions in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via loca...

Intel Server Board and Server System BIOS firmware security vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-34301Non-Intel issued Description:...

AMD SMM Supervisor Vulnerability Security Notice

Bulletin ID: AMD-SB-7011 Potential Impact: Loss of confidentiality, integrity, and availability Severity: High Summary External researchers reported a potential vulnerability during SMM Supervisor initialization which may impact some AMD processors. On systems that do not have Supervisor Mode...

AMD Client Vulnerabilities – November 2023

Bulletin ID: AMD-SB-4002 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Secure Processor ASP, AMD System Management Unit SMU, and other platform components were reported, and mitigations are being...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...