CentOS 7 : kernel (RHSA-2022:5937)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5937 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosu...

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to deficiencies in access control. This allows attackers to trigger a service failure.

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures...

kernel: Possible Denial of Service on Intel(R) Processors

A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...

intel-microcode: Race conditions in some Intel(R) Processors

A flaw was found in intel-microcode. The hardware logic contains race conditions in some IntelR processors that may allow an authenticated user to enable partial information disclosure via local access...

kernel: Local information disclosure in some Intel(R) processors

A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host...

Moderate: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: microcodectl: kernel: local privilege escalation on Intel microcode on IntelR XeonR rhel-9.4.0 JIRA:RHEL-30860...

Important: microcode_ctl

Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...

Important: microcode_ctl

Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...

CentOS 9 : microcode_ctl-20240910-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20240910-1.el9 build changelog. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information...

USN-7033-1 intel-microcode vulnerabilities

It was discovered that some IntelR Processors did not properly restrict access to the Running Average Power Limit RAPL interface. This may allow a local privileged attacker to obtain sensitive information. CVE-2024-23984 It was discovered that some IntelR Processors did not properly implement...

USN-7033-1: Intel Microcode vulnerabilities

It was discovered that some IntelR Processors did not properly restrict access to the Running Average Power Limit RAPL interface. This may allow a local privileged attacker to obtain sensitive information. CVE-2024-23984 It was discovered that some IntelR Processors did not properly implement...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

HPESBHF04691 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20240830 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-24980 |...

OESA-2024-2158 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access.CVE-2024-23984 Improper finite state machines FSMs in...

SUSE: Security Advisory (SUSE-SU-2024:3332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : microcode_ctl (ALAS-2024-2635)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2635 advisory. 2024-10-10: CVE-2024-22374 was added to this advisory. Improper isolation in some IntelR Processors stream cache...

Important: microcode_ctl

Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...

Important: microcode_ctl

Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...

HPESBHF04704 rev.2 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01071, 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.2008-07-2024 U46 ROM Family or prior to v3.3007-31-2024 U30 ROM Family HPE StoreEasy...