HPESBHF04933 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processor BIOS, INTEL-SA-01308, Intel Xeon 6 Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 - Prior to 1.4005-22-202...

2025.3 IPU, Intel® TDX Module Advisory

Summary: Potential security vulnerabilities in the Intel® TDX firmware may allow information disclosure or escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20613 Description: Predictable Seed in...

Intel® Xeon® 6 Processor Firmware Advisory

Summary: Potential security vulnerabilities for some Intel® Xeon® 6 Processors when using Intel® Software Guard Extensions Intel® SGX or Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities...

HPESBHF04932 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Support Pack SVTSP 20250630 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-33607 |...

Linux Distros Unpatched Vulnerability : CVE-2025-20054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local...

Linux Distros Unpatched Vulnerability : CVE-2021-28692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In...

Linux Distros Unpatched Vulnerability : CVE-2024-36275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference in some IntelR OptaneTM PMem Management software versions before CRMGMT02.00.00.4040, CRMGMT03.00.00.0499 may allow a authenticated use...

Linux Distros Unpatched Vulnerability : CVE-2021-24116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secre...

2025.3 IPU, Intel®  Xeon® Processor Firmware Advisory

Summary: Potential security vulnerabilities in the Intel® Xeon® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20053 Description: Improper buffer restriction...

A vulnerability in the Linux kernel driver for certain Intel(R) Ethernet network controllers and adapters, related to buffer overflow attacks, allows an attacker to gain elevated privileges.

The vulnerability in the Linux kernel driver for certain IntelR Ethernet network controllers and adapters is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

Linux Distros Unpatched Vulnerability : CVE-2023-23583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of...

UBUNTU-CVE-2025-38515

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spscqueuepush and the run-job worker, in which spscqueuepush may return not-first while the run-job worker has already idled due to the jo...

Linux Distros Unpatched Vulnerability : CVE-2025-37754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence,...

Linux Distros Unpatched Vulnerability : CVE-2025-21929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hidishtpclremove During the rmmod operation...

Linux Distros Unpatched Vulnerability : CVE-2024-46769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devmkasprintf returned value intelspipopulatechip use devmkasprintf to...

Intel oneAPI Base Toolkit < 2025.1.0 Multiple Vulnerabilities

Multiple vulnerabilities exist in Intel oneAPI Base Toolkit versions prior to 2025.1.0. See vendor advisory for more details. - Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalati...

Malicious code in intel-ai-assistant-ui (npm)

The package intel-ai-assistant-ui was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-27707

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-32004

Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27576

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an unauthenticated user to potentially enable denial of service via local access...