MGASA-2022-0100 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.28 and fixes at least the following security issues: Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

USN-5317-1 linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi vulnerabilities

Nick Gregory discovered that the Linux kernel incorrectly handled network offload functionality. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-25636 Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida...

CVE-2021-0117

Pointer issues in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access...

Design/Logic Flaw

Out-of-bounds read in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0125

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2021-0119

CVE-2021-0119 stems from improper initialization in Intel processor firmware that can allow a local attacker with physical access to escalate privileges. Connected advisories confirm affected platforms (e.g., IBM QRadar appliances M5/M6, certain Oracle/Red Hat/HP/F5-guided deployments) and descri...

CVE-2021-0107

Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0111

NULL pointer dereference in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0103

Insufficient control flow management in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0092

Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's offerings to interpret computer instructions and process data in computer software. A security vulnerability exists in the Intel Processors BIOS firmware that stems from a potential security flaw in the BIOS firmware of Intel Processors. An attack...

HPESBHF04244 rev.4 - Certain HPE Servers using certain Intel Processor BIOS, Intel Processor Breakpoint Control Flow Advisory, Intel-SA-00532, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6001132022 HPE ProLiant DL20 Gen10 Server - Prior to 2.5601202022 HPE ProLiant DL160 Gen10 Server - Prior to 2.6001132022 HPE...

Mageia: Security Advisory (MGASA-2021-0031)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0332)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Intel processor BIOS systems, which allows attackers to enhance their privileges

The vulnerability of Intel processor BIOS systems is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel processor BIOS systems, which allows attackers to enhance their privileges

The vulnerability of Intel processor BIOS systems is related to incorrect code generation. Exploiting this vulnerability can allow attackers to enhance their privileges...

F5 Networks BIG-IP : Intel processor vulnerabilities (K41043270)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K41043270 advisory. CVE-2021-0086Observable response discrepancy in floating-point operations for some IntelR Processors may allow...

Researchers Break Intel SGX With New 'SmashEx' CPU Attack Technique

A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored within enclaves and even run arbitrary code on vulnerable systems. The vulnerability CVE-2021-0186, CVSS score: 8.2 was discovered by a group of academics from...