CVE-2024-50197

In the Linux kernel, the following vulnerability has been resolved: pinctrl: intel: platform: fix error path in deviceforeachchildnode The deviceforeachchildnode loop requires calls to fwnodehandleput upon early returns to decrement the refcount of the child node and avoid leaking memory if that...

SUSE CVE-2024-50197

In the Linux kernel, the following vulnerability has been resolved: pinctrl: intel: platform: fix error path in deviceforeachchildnode The deviceforeachchildnode loop requires calls to fwnodehandleput upon early returns to decrement the refcount of the child node and avoid leaking memory if that...

CVE-2024-50197 pinctrl: intel: platform: fix error path in device_for_each_child_node()

In the Linux kernel, the following vulnerability has been resolved: pinctrl: intel: platform: fix error path in deviceforeachchildnode The deviceforeachchildnode loop requires calls to fwnodehandleput upon early returns to decrement the refcount of the child node and avoid leaking memory if that...

CVE-2024-50197 pinctrl: intel: platform: fix error path in device_for_each_child_node()

In the Linux kernel, the following vulnerability has been resolved: pinctrl: intel: platform: fix error path in deviceforeachchildnode The deviceforeachchildnode loop requires calls to fwnodehandleput upon early returns to decrement the refcount of the child node and avoid leaking memory if that...

CVE-2024-50197

CVE-2024-50197 : In the Linux kernel, the pinctrl: intel: platform path fixes a memory leak in the device_for_each_child_node() error path. The bug occurred because there was an early return in intel_platform_pinctrl_prepare_community() where fwnode_handle_put() was not called to drop a reference...

UBUNTU-CVE-2024-50107

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

SUSE CVE-2024-46862

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no linksnum in struct sndsocacpimach , and we test !link-numadr as a condition to end the loop in hdasdwmachineselect. So an empty item in struct...

CVE-2023-28743

Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-26250 · Intel · Intel Sgx

Name of the Vulnerable Software and Affected Versions: SCONE Confidential Computing Platform versions prior to 5.8.0 Description: An issue was discovered in the SCONE Confidential Computing Platform, where the lack of pointer-alignment logic in scone dispatch and other entry functions allows a...

kernel: ASoC: Intel: avs: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in a buffer overflow although it's...

K000133512: Intel platform vulnerabilities (INTEL-SA-00737) CVE-2021-39295, CVE-2021-39296, CVE-2022-29493, CVE-2022-29494, and CVE-2022-35729

Security Advisory Description CVE-2021-39295 In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface. CVE-2021-39296 In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control ...

CVE-2022-35729

Out of bounds read in firmware for OpenBMC in some IntelR platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access...

CVE-2022-35729

CVE-2022-35729 affects OpenBMC firmware on some Intel platforms. The issue is an out-of-bounds read in the firmware that, on affected OpenBMC/OpenBMC implementations prior to version 0.72, could allow an unauthenticated attacker to cause a denial of service over the network. The vulnerability is ...

SUSE CVE-2019-11090

Cryptographic timing conditions in the subsystem for IntelR PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; IntelR TXE 3.1.70 and 4.0.20; IntelR SPS before versions SPSE504.01.04.305.0, SPSSoC-X04.00.04.108.0, SPSSoC-A04.00.04.191.0, SPSE304.01.04.086.0,...

Intel SGX Platform Software 信息泄露漏洞

Intel SGX Platform Software is a suite of software protection extensions from Intel Corporation. A security vulnerability exists in Intel SGX Platform Software, which can be exploited by attackers to cause an information disclosure...

CVE-2020-24452

Improper input validation in the IntelR SGX Platform Software for Windows may allow an authenticated user to potentially enable a denial of service via local access...

SGX Platform Software Input Validation Error Vulnerability

Intel SGX Platform Software is a suite of software protection extensions from Intel Corporation USA. An input validation error vulnerability exists in Intel SGX Platform that could allow an authenticated user to enable denial of service via local access...

PT-2020-3964 · Intel · Intel Amt +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.79 IntelR AMT versions prior to 11.12.79 IntelR AMT versions prior to 11.22.79 IntelR AMT versions prior to 12.0.68 IntelR AMT versions prior to 14.0.39 IntelR ISM versions prior to 11.8.79 IntelR ISM version...

HPSBHF03600 rev. 2 - Insecure Handling of BIOS and AMT Passwords

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY A potential security vulnerability has been identified with the Intel platform code firmware included in certain Intel vPro Processor families with AMT...

Insecure Handling of BIOS and AMT Passwords in Intel Platform Sample Firmware - US

Lenovo Security Advisory: LEN-23848 Potential Impact: Information disclosure Severity: High Scope of Impact: Industry wide CVE Identifier: CVE-2017-5704 Summary Description: Platform sample firmware supplied by Intel for multiple processor familes, and incorporated by Lenovo into multiple product...