28 matches found
CVE-2026-90341
A flaw was found in the Linux kernel's handling of coreboot firmware tables. A local attacker with control over firmware could provide a malformed coreboot table. This could cause an overflow in size calculations or an advertised extent beyond the allocated resource, leading the kernel to map and...
ghidra-firmware-utils
Ghidra Firmware Utilities Vari moduli per Ghidra per assistere nel reverse engineering del firmware PC. Questo è stato accettato come progetto coreboot per GSoC 2019. Funzionalità Loader per option ROM PCI Implementa un loader FS per option ROM PCI gestisce ROM ibride con più immagini, es. x86...
SUSE CVE-2026-90341
In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...
Linux Distros Unpatched Vulnerability : CVE-2026-90341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However,...
CVE-2026-90341
In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...
CVE-2026-90341
CVE-2026-90341 affects the Linux kernel's coreboot firmware driver . The vulnerable function coreboot_table_probe() replaces the platform resource length with header and table sizes supplied by firmware before mapping the full table. A malformed table can overflow the 32-bit size addition or adve...
CVE-2026-90341 firmware: coreboot: Validate table bounds
In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...
CVE-2026-90341: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...
PT-2026-94689
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the coreboot firmware handling where coreboot table probe replaces the platform resource length with header and table sizes provided by the firmware before mapping the...
coreboot-utils-25.09-2.1 on GA media (moderate)
coreboot-utils-25.09-2.1 on GA media Announcement ID: openSUSE-SU-2025:15675-1 Rating: moderate Cross-References: CVE-2025-62813 CVSS scores: CVE-2025-62813 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-62813 SUSE : 6.8...
OPENSUSE-SU-2025:15675-1 coreboot-utils-25.09-2.1 on GA media
These are all security issues fixed in the coreboot-utils-25.09-2.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2022-33608
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-29264
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur. CVE-2022-29264 Note that Nessus relies on the presence...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
DEBIAN-CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
Design/Logic Flaw
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
