34098 matches found
SUSE CVE-2024-29214
Improper input validation in UEFI firmware CseVariableStorageSmm for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
kernel: i40e: fix idx validation in config queues msg
A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...
kernel: i40e: add validation for ring_len param
A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...
3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026
Beyond the direct impact of cyberattacks, enterprises suffer from a secondary but potentially even more costly risk: operational downtime, any amount of which translates into very real damage. That's why for CISOs, it's key to prioritize decisions that reduce dwell time and protect their company...
Intel Killer Software < 40.25.509.1465 Escalation of Privilege (INTEL-SA-01377)
The version of Intel Killer Software installed on the remote host is prior to 40.25.509.1465. It is, therefore, affected by an escalation of privilege vulnerability as referenced in the INTEL-SA-01377 advisory. - An uncontrolled search path vulnerability exists in some Intel Killer Performance...
kernel: i40e: fix idx validation in config queues msg
A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...
kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...
kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...
kernel: i40e: fix idx validation in config queues msg
A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...
kernel: i40e: add validation for ring_len param
A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...
CVE-2026-23553
In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...
The vulnerability of UEFI microprogramming on ASRock motherboard based on Intel 500, 600, 700, and 800 chipsets allows a hacker to perform DMA attacks and circumvent existing security restrictions.
The vulnerability of UEFI microprogramming on ASRock motherboard based on Intel 500, 600, 700, and 800 chipsets is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to perform DMA attacks and circumvent existing security restrictions...
The vulnerability of UEFI microprogramming on GIGABYTE motherboards based on Intel and AMD chipsets allows a hacker to perform DMA attacks and circumvent existing security restrictions.
The vulnerability of UEFI microprogramming on GIGABYTE motherboards based on Intel and AMD chipsets is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to perform DMA attacks and circumvent existing security restrictions...
The vulnerability of UEFI microprogramming on ASUS motherboard based on Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 chipsets allows a hacker to perform a DMA attack and circumvent existing security restrictions.
The vulnerability of UEFI microprogramming on ASUS motherboard based on Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, and W680 chipsets is related to access control deficiencies. Exploiting this vulnerability allows an attacker to perform DMA attacks and circumvent...
The vulnerability of UEFI microprogramming on MSI motherboards based on Intel 600 and 700 chipsets allows a hacker to perform DMA attacks and circumvent existing security restrictions.
The vulnerability of UEFI microprogramming on MSI motherboards based on Intel 600 and 700 chipsets is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to perform DMA attacks and circumvent existing security restrictions...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005087)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005087 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the...
kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...
ALSA-2026:1142 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcievent: call disconnect callback before deleting conn CVE-2023-53673 kernel: ASoC: Intel: bytcrrt5640: Fix invalid quirk input mapping CVE-2025-40154 kernel: Linux kernel:...