The vulnerability of graphic drivers in microprogramming software for Intel processors lies in the absence of quotation marks in the syntax of elements or search paths. This allows attackers to exploit their privileges.

The vulnerability of graphics drivers in microprogramming software for Intel processors is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of graphic drivers of microprogramming software for Intel processors, related to writing beyond buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of graphics drivers in microprogramming software for Intel processors lies in the ability to execute code beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel processors...

Privilege Escalation

intel-microcode is vulnerable to Privilege Escalation. The vulnerability exists due to a sequence of processor instructions that results in unexpected behavior for certain IntelR Processors. An authenticated user may exploit this issue to potentially enable escalation of privilege, information...

HPESBHF04560 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380 Gen10 G - Prior to HPE OmniSta...

OESA-2023-1855 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denia...

Oracle Linux 7 : kernel (ELSA-2023-7423)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7423 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - net/sched: clsu32: No longer copy tcfresult on update to avoid use-after-free Davide Caratti...

Fedora 37 : microcode_ctl (2023-40e71fe5b9)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-40e71fe5b9 advisory. - Update to upstream 2.1-42. 20231114 - Update of 06-6a-06/0x87 ICX-SP D0 microcode from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 ICL-D ...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:4493-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4493-1 advisory. - Updated to Intel CPU Microcode 20231114 release. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

RHEL 9 : kernel-rt (RHSA-2023:7379)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7379 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Google Reveals ‘Reptar’ Vulnerability Threatening Intel Processors

By Deeba Ahmed Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments. This is a post from HackRead.com Read the original post: Google Reveals Reptar Vulnerability Threatening Intel Processors...

USN-6485-1 intel-microcode vulnerability

Benoit Morgan, Paul Grosen, Thais Moreira Hamasaki, Ke Sun, Alyssa Milburn, Hisham Shafi, Nir Shlomovich, Tavis Ormandy, Daniel Moghimi, Josh Eads, Salman Qazi, Alexandra Sandulescu, Andy Nguyen, Eduardo Vela, Doug Kwan, and Kostik Shtoyk discovered that some IntelR Processors did not properly...

Oracle Linux 9 : microcode_ctl (ELSA-2023-12991)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-12991 advisory. 4:20230808-2.0.2 - update 06-6a-06 to 0xd0003b9 CVE-2023-23583 Tenable has extracted the preceding description block directly from the Oracle Linux security...

SUSE CVE-2023-23583

Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access...

Amazon Linux 2023 : microcode_ctl (ALAS2023-2023-436)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-436 advisory. 2024-03-27: CVE-2023-23908 was added to this advisory. An issue was found in redundant REX instruction prefix values affecting third generation Intel Xeon Scalable Icelake processors. The issue...

Amazon Linux 2 : microcode_ctl (ALAS-2023-2341)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2341 advisory. An issue was found in redundant REX instruction prefix values affecting third generation Intel Xeon Scalable Icelake processors...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2023:4441-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4441-1 advisory. - Updated to Intel CPU Microcode 20231114 pre-release labeled 20231113. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or...