kernel: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devmkstrdup to avoid memleak. sofpdata-tplgfilename can have address allocated by kstrdup and can be overwritten. Memory leak was detected with kmemleak: unreferenced object 0xffff88812391ff60 size 16:...

kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL...

kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem. In guest/host mode for Intel Processor Trace Intel PT, the hypervisor fails to properly validate virtual processor configurations and manage tracing states during virtual machine transitions. A local user or guest...

kernel: media: intel/ipu6: remove cpu latency qos request on error

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: remove cpu latency qos request on error Fix cpu latency qos list corruption like below. It happens when we do not remove cpu latency request on error path and free corresponding memory. 30.634378 l7 kernel:...

kernel: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devmkstrdup to avoid memleak. sofpdata-tplgfilename can have address allocated by kstrdup and can be overwritten. Memory leak was detected with kmemleak: unreferenced object 0xffff88812391ff60 size 16:...

kernel: perf/x86/intel: Fix crash in icl_update_topdown_event()

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in iclupdatetopdownevent The perffuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PID: 0 Comm: swapper/23...

kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL...

PT-2025-46415

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 25.2 Description An uncontrolled search path exists in some Intel Driver and Support Assistant versions before 25.2 within Ring 3 User Applications, potentially allowing an escalation of...

Intel NPU Driver for Windows 安全漏洞

Intel NPU Driver for Windows is a neural processing unit driver from Intel Corporation USA. A security vulnerability exists in Intel NPU Driver for Windows prior to version 32.0.100.4023, which stems from failure to clear sensitive information before resource release, which could lead to...

PT-2025-46400

Name of the Vulnerable Software and Affected Versions IntelR One Boot Flash Update IntelR OFU versions prior to 14.1.31 Description An uncontrolled search path issue exists in some IntelR One Boot Flash Update IntelR OFU software. This issue, present within Ring 3: User Applications, may allow an...

Intel Driver and Support Assistant 代码问题漏洞

Intel Driver and Support Assistant is an Intel Driver and Support Assistant application from Intel Corporation USA. The program is primarily used to detect and install system driver updates. A code issue vulnerability exists in Intel Driver and Support Assistant DSA versions prior to 25.2 that...

Intel SigTest 访问控制错误漏洞

Intel SigTest is a signal quality analysis software from Intel Corporation USA. An access control error vulnerability exists in Intel SigTest versions prior to 6.1.10, which stems from improper access control and could lead to elevation of privilege...

PT-2025-46436

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description An out-of-bounds read issue exists in some IntelR PROSet/Wireless WiFi Software for Windows. This flaw, located within Ring 2: Device Drivers, could allow fo...

Intel UEFI Integrator Tools 安全漏洞

Intel UEFI Integrator Tools is a firmware integration tool from Intel Corporation USA. A security vulnerability exists in Intel UEFI Integrator Tools that originates from active debugging code in the kernel and could lead to a denial of service and elevation of privilege...

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability exists in Intel Neural Compressor versions prior to v3.4, which stems from improper neutralization and could lead to elevated...

Intel PROSet/Wireless WiFi Software 缓冲区错误漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A buffer error vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 23.160, which stems from an out-of-bounds write in the Ring 2 device driver that could lead to a denial of...

Intel Slim Bootloader 安全漏洞

Intel Slim Bootloader is a lightweight secure boot solution from Intel Corporation USA designed for the Intel platform. A security vulnerability exists in Intel Slim Bootloader that stems from a failure of the UEFI firmware protection mechanism, which could lead to elevated privileges...

Intel oneAPI DPC++/C++ Compiler 代码问题漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2025.0.1, which stems from an uncontrolled search path that could lead to elevation of privilege...

Intel Killer 代码问题漏洞

Intel Killer is a wireless network card driver from Intel Corporation USA. A code issue vulnerability exists in Intel Killer versions prior to 4.0 40.25.509.1465, which stems from an uncontrolled search path that could lead to elevated privileges...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from mismanagement of privileges, which can be exploited by an attacker to cause information...