2024.2 IPU - Intel® Processor Stream Cache Advisory

Summary: A potential security vulnerability in some Intel® Processor stream cache mechanisms may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-49141 Description: Improper isolation in some Intel...

UBUNTU-CVE-2022-48713

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf-single before calling ptbufferregionsize in a place where a missing check can cause a kernel crash. Fixes a bug introduced by commit...

SUSE CVE-2022-1852

A NULL pointer dereference flaw was found in the Linux kernel's KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU...

HPESBCR04644 rev.1 - Certain HPE Cray Servers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX420 Compute Blade - Prior to BIOS v.1.3.0 HFP 24.3.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBHF04637 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Using Certain Intel Processors, INTEL-SA-01051, 2024.2 IPU - Intel Processor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant MicroServer Gen11 - Prior to v1.5005-16-2024 HPE ProLiant DL20 Gen11 - Prior to v1.5005-16-2024 HPE ProLiant ML30 Gen11 - Prior to v1.5005-16-2024 CVSS Scores: ...

CVE-2024-21831

Uncontrolled search path in some IntelR Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21774

Intel Processor Identification Utility is affected by CVE-2024-21774 due to an uncontrolled search path that could allow privilege escalation on an authenticated local attacker. Vulnerable versions are prior to 6.10.34.1129 (Legacy) and prior to 7.1.6. A fix is available: upgrade to 6.10.34.1129 ...

CVE-2024-21774

Uncontrolled search path in some IntelR Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21831

Uncontrolled search path in some IntelR Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21831

Uncontrolled search path in some IntelR Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21831

CVE-2024-21831 affects Intel® Processor Diagnostic Tool (IPDT) software prior to version 4.1.9.41. The issue is an uncontrolled search path that may allow an authenticated local user to escalate privileges. The advisory cites a CVSS v3.1 base score of 6.7 (Medium) with local access required, high...

Intel Processor Identification Utility 安全漏洞

Intel Processor Identification Utility is a processor identification utility from Intel Corporation USA. The program supports the display of graphics information, chipset information, processor supported technologies, and other information. A security vulnerability previously existed in Intel...

Intel Processor Diagnostic Tool 安全漏洞

Intel Processor Diagnostic Tool IPDT is a processor functionality diagnostic tool from Intel Corporation USA. A security vulnerability previously existed in Intel Processor Diagnostic Tool version 4.1.9.41, which stemmed from an uncontrolled search path issue. It could allow an authenticated user...

Intel® Processor Diagnostic Tool Advisory

Summary: A potential security vulnerability in some Intel® Processor Diagnostic Tool software may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21831 Description: Uncontrolled search path in some Intel®...

Intel® Processor Identification Utility Software Advisory

Summary: Potential security vulnerability in some Intel® Processor Identification Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21774 Description: Uncontrolled search path i...

RHEL 5 : hw (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - hw: Fast forward store predictor CVE-2020-869...

HPESBHF04608 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Using Certain Intel Processors, INTEL-SA-00972, 2024.1 IPU - Intel Processor Bus Lock Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant MicroServer Gen11 - Prior to v1.4401-18-2024 HPE ProLiant ML30 Gen11 - Prior to v1.4401-18-2024 CVSS Scores: | C...

2024.1 IPU - Intel® Processor Return Predictions Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing a firmware update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-38575 Description: Non-transparent sharing of return predictor targets...

HPESBHF04607 rev.1 - Certain HPE ProLiant DL/DX Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.0002-22-2024 HPE ProLiant DL360 Gen10 Plus server - Prior to v2.0003-06-2024 HPE ProLiant DL380 Gen10 Plus server -...

HPESBHF04613 rev.1 - Certain HPE Apollo/XL Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to v2.0002-22-2024 HPE ProLiant XL220n Gen10 Plus Server - Prior to v2.0002-22-2024 HPE ProLiant XL290n Gen10 Plus Server - Prior to...