8255 matches found
PT-2023-23248 · Unknown · Hwpartsdfr
Name of the Vulnerable Software and Affected Versions: hwPartsDFR module affected versions not specified Description: The issue concerns a vulnerability in API calling verification within the hwPartsDFR module. Successful exploitation of this issue may affect device confidentiality...
Fedora 38 : xen (2023-8334fe0ecb)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8334fe0ecb advisory. Mishandling of guest SSBD selection on AMD hardware XSA-431, CVE-2022-42336 Tenable has extracted the preceding description block directly from the...
PT-2023-12607 · Unknown · Hw Keymaster
Name of the Vulnerable Software and Affected Versions: HW KEYMASTER module affected versions not specified Description: The issue is related to a lack of length check in the HW KEYMASTER module, which may lead to out-of-bounds read when successfully exploited. Recommendations: At the moment, ther...
CVE-2022-36397
A flaw was found in Intel. Incorrect default permissions in the software installer for some IntelR QAT drivers for the Linux Kernel may allow an authenticated user to enable privilege escalation via local access. Mitigation Please contact the hardware vendor for more update...
CVE-2022-41808
An improper buffer restriction flaw was found in the software for the Intel® QAT Driver for the Linux Kernel. This flaw allows an authenticated user to cause a denial of service via local access. Mitigation Please contact the hardware vendor for more updates...
[SECURITY] Fedora 37 Update: rust-below-0.6.3-4.fc37
below is an interactive tool to view and record historical system data. It has support for: - information regarding hardware resource utilization - viewing the cgroup hierarchy - cgroup and process information - pressure stall information PSI - record mode to record system data - replay mode to...
[SECURITY] Fedora 37 Update: keyring-ima-signer-0.1.0-9.fc37
The IMA Integrity Measurement Architecture is a key component of the Linux integrity subsystem designed to ensure integrity, authenticity, and confidentiality of systems including hardware root of trusts TPM. This tool allows signing of files in userspace, inclusding options of including the...
CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
CVE-2022-42336
The CVE-2022-42336 issue affects Xen on AMD Family 17h and Hygon Family 18h CPUs, where SSBD activation is coordinated across threads via a per-core counter. The vulnerability arises when guest writes to VIRT_SPEC_CTRL.SSBD are propagated to the helper that tracks per-core SSBD activity, causing ...
CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
kernel: netfilter: flowtable: fix stuck flows on cleanup due to pending work
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens in order: 1 gcstep work is stopped to disable any further stats/del requests...
kernel: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox pcigetdevice will increase the reference count for the returned 'dev'. We need to call pcidevput to decrease the reference count. Since 'dev' is only used in...
kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
An out-of-bounds write vulnerability exists in the linux kernel, such that when mlx5ibgethwstats is used forthe device portnum = 0, There is a special handling in order to use the correct counters, but, portnum is being passed down the stack without any change leading to damage in system...
hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch
A flaw was found in hw. This issue can cause AMD CPUs to transiently execute beyond unconditional direct branches...
kernel: wifi: brcmfmac: fix invalid address access when enabling SCAN log level
A NULL pointer dereference vulnerability was found in the Broadcom brcmfmac wireless driver in the Linux kernel. When the SCAN debug log level is enabled, a loop variable 'i' is incorrectly modified when setting random MAC addresses. This causes an invalid memory access when attempting to print...