Security Notice - Statement on Local Privilege Escalation Vulnerability "Dirty Frag" (CVE-2026-43284, CVE-2026-43500) in Linux Kernel

Following the discovery of the local privilege escalation vulnerability CVE-2026-43284, CVE-2026-43500 "Dirty Frag" on Linux Kernel, described as a successor to Copy Fail CVE-2026-31431, Huawei has launched an immediate investigation. Successful exploitation of this vulnerability may allow...

CVE-2023-52711

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory thus potentially...

CVE-2023-52711

CVE-2023-52711 involves an exposed SMI handler in AMD’s PspP2CmboxV2 firmware (AmdPspP2CmboxV2) that can bypass protections from prior UEFI phases and grant direct access to SPI flash. Additionally, the issue can leak and corrupt SMM memory, potentially enabling code execution in SMM. Connected s...

CVE-2023-52711

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory thus potentially...