CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

CVE-2024-42444

CVE-2024-42444 affects AMI AptioV BIOS and is described as a TOCTOU race condition involving BIOS components (DMA/SMM) that may allow local attackers to execute arbitrary code on the target device. The available sources consistently report a BIOS-level vulnerability with a TOCTOU contention condi...

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

PT-2025-2636 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to a TOCTOU Race Condition in the BIOS of APTIOV, which can be exploited by an attacker using local means. This could potentially lead to the execution of arbitrary code...

AMI AptioV 安全漏洞

AMI AptioV is a firmware-related editor from AMI USA. A security vulnerability exists in AMI AptioV that stems from the presence of a TOCTOU contention condition in the BIOS that can lead to the execution of arbitrary code...

CVE-2024-55642

In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential deadlocks in zone write plug error recovery Zone write plugging for handling writes to zones of a zoned block device always execute a zone report whenever a write BIO to a zone fails. The intent of this i...

Researchers Uncover Major Security Flaw in Illumina iSeq 100 DNA Sequencers

Cybersecurity researchers have uncovered firmware security vulnerabilities in the Illumina iSeq 100 DNA sequencing instrument that, if successfully exploited, could permit attackers to brick or plant persistent malware on susceptible devices. "The Illumina iSeq 100 used a very outdated...

Amazon Linux 2 : edk2 (ALAS-2024-2722)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2722 advisory. A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...

Dell Client Platform BIOS Improper Input Validation (dsa-2024-355)

The version of Dell Client Platform BIOS installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the dsa-2024-355 advisory. - Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed...

Important: edk2

Issue Overview: A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. CVE-2021-28216 A BIOS bug in firmware for a particular PC model...

"Failed to convert [Not Settable] to UUID."

Challenge Veeam Backup & Replication task interacting with Proxmox VE host fails with: Failed to convert Not Settable to UUID Cause This occurs when the Proxmox VE host has an empty bios UUID, or the reported bios UUID value is unparsable. Solution 1. Remove workers if any from the Veeam Backup &...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

Dell Client Platform BIOS 输入验证错误漏洞

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS suffers from an input validation error vulnerability that originates from an over-privileged attacker with local access that could lead to arbitrary code execution. No detailed vulnerability details a...

HPESBHF04754 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01111, UPLR2 - Intel ACTM Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22185 |...

HPESBHF04756 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01079, Intel Xeon Processor with Intel SGX Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-21820 |...

HPESBHF04690 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 170r Gen10 Server - Prior to HPE SimpliVity Gen10 Support Pack SVTSP...

HPESBHF04686 rev.1 - Certain HPE SimpliVity AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7014: SMM Lock Bypass, Local Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v202411...

HPESBHF04757 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01076, UPLR1 - Intel TDX Seamldr Software Advisory, Local Esclanation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-21850 |...