PT-2025-6487

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via loc...

PT-2025-6637

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper initialization in the UEFI firmware OutOfBandXML module, which may allow a privileged user to potentially enable information disclosure via local access...

PT-2025-6630

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper input validation in the UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable information disclosure via local...

PT-2025-6488

Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR processors. This may allow a privileged user to potentially enable escalation of privilege via loc...

CVE-2022-21198

Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26006

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21781

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access...

CVE-2024-21829

Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

HPESBHF04779 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX380 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX360 Gen10 Plus server - Prior t...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240910 release bsc1230400 CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access...

PT-2025-2403 · Phoenix · Phoenix Securecore™ For Intel Coffee Lake +1

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore™ for Intel Kaby Lake versions prior to 4.0.1.1012 Phoenix SecureCore™ for Intel Coffee Lake versions prior to 4.1.0.568 Phoenix SecureCore™ for Intel Comet Lake versions prior to 4.2.1.292 Phoenix SecureCore™ for Intel Ice...

The vulnerability of graphics drivers in microprogramming software for Intel processors arises from incorrect neutralization of special elements in the output data used by the input component. This allows attackers to exploit their privileges.

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to incorrect neutralization of special elements in the output data used by the input component. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CentOS 9 : microcode_ctl-20241112-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20241112-1.el9 build changelog. - Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a...

CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

The vulnerability of the SMI transfer monitor (STM) in microprogramming software for Intel processors allows attackers to enhance their privileges.

The vulnerability of the SMI transfer monitor STM in microprogramming software for Intel processors is related to improper handling of certain operations. Exploiting this vulnerability can allow an attacker to enhance their privileges...

DEBIAN-CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...