CVE-2023-28383

Improper conditions check in some IntelR BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-27504

Improper conditions check in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28383

CVE-2023-28383 is described in Intel advisory INTEL-SA-00814 as an improper conditions check in Intel BIOS PPAM firmware that may allow a privileged user to escalate privileges via local access (local attack, high complexity). The CVSS 3.1 base shows AV:L, AC:H, PR:H, UI:N, with impact partially ...

CVE-2023-27504

The CVE-2023-27504 issue concerns Intel BIOS Guard firmware with an improper conditions check that could let a privileged local user escalate privileges. Across connected sources, the vulnerability is tied to Intel BIOS Guard and PPAM firmware, with a CVSS v3.1 base score of 7.2 (High) and local ...

CVE-2023-28402

Improper input validation in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28402

Improper input validation in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28402

The CVE-2023-28402 entry relates to Intel BIOS Guard firmware (and PPAM per Intel advisory) with improper input validation that could allow a privileged user to escalate privileges via local access. Affected are Intel BIOS Guard/PPAM firmware across multiple CPU generations; CVSSv3.1 base score 7...

Intel BIOS Guard firmware 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on boot phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS Guard firmware that stems from t...

PT-2024-12158 · Intel · Intel Bios Guard Firmware

Name of the Vulnerable Software and Affected Versions: IntelR BIOS Guard firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR BIOS Guard firmware, which may allow a privileged user to potentially enable escalation of privilege via...

Multi-vendor BIOS Security Vulnerabilities (May, 2024) - Lenovo Support US

No description provided...

Multi-vendor BIOS Security Vulnerabilities (May, 2024) - Lenovo Support US

No description provided...

Intel® BIOS Guard and PPAM Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® BIOS Guard and Platform Properties Assessment Module PPAM firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28402 Descriptio...

Intel BIOS Guard and PPAM Firmware May 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® BIOS Guard and Platform Properties Assessment Module PPAM firmware, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to...

PT-2024-5327 · Dell · Dell Edge Gateway

Name of the Vulnerable Software and Affected Versions: Dell Edge Gateway BIOS versions 3200 and 5200 Description: The issue is related to an out-of-bounds read vulnerability in the DXE driver of the BIOS firmware of Dell Edge Gateway devices. This vulnerability can be exploited by a local...

CVE-2022-48673

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IBWCWRFLUSHERR status. Current implementation does not wait for it is done, but destroy...

CVE-2022-48692

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd-result only when scmnd is not NULL This change fixes the following kernel NULL pointer dereference which is reproduced by blktests srp/007 occasionally. BUG: kernel NULL pointer dereference, address:...

CVE-2022-48674 erofs: fix pcluster use-after-free on UP platforms

In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIGSMP disabled, KASAN reports as below: ================================================================== BUG: KASAN: use-after-free in...

CVE-2022-48674

In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIGSMP disabled, KASAN reports as below: ================================================================== BUG: KASAN: use-after-free in...

CVE-2022-48673 net/smc: Fix possible access to freed memory in link clear

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IBWCWRFLUSHERR status. Current implementation does not wait for it is done, but destroy...

SUSE CVE-2024-26938

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intelbiosencodersupportsdpdualmode If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We...