TencentOS Server 2: linux-firmware (TSSA-2024:0160)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0160 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 3: microcode_ctl (TSSA-2022:0254)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0254 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

K000157901: Intel(R) PCIe Switch software vulnerability CVE-2025-24323

Security Advisory Description Improper access control in some firmware package and LED mode toggle tool for some IntelR PCIe Switch software before version MR41.0b1 may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-24323 Impact There is no impact...

HPESBHF04969 rev.1 - HPE Compute Scale-up Server 3200 Platform Servers using Certain Intel Processors, INTEL-SA-01249, 2025.2 IPU, Intel Processor Stream Cache Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.55.98 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20109 |...

CVE-2025-61662

A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the applicati...

November 18, 2025—KB5072359 (OS Build 26100.7178) Out-of-band

None None...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

...

ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot

...

Linux Distros Unpatched Vulnerability : CVE-2025-26402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an...

Linux Distros Unpatched Vulnerability : CVE-2025-26405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper control of dynamically-managed code resources for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged...

The vulnerability in the function intel_engines_init() of the drivers/gpu/drm/i915/gt/intel_engine_cs.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support in the Linux kernel.

The vulnerability of the intelenginesinit function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an...

The vulnerability of the has_external_pci() function in the drivers/iommu/intel/iommu.c file of the Linux kernel’s IOMMU support module allows a attacker to cause a service failure.

The vulnerability of the hasexternalpci function in the drivers/iommu/intel/iommu.c file of the Linux kernel’s IOMMU support module is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service failu...

Vulnerability of the __iwl_mvm_remove_time_event() function in the drivers/net/wireless/intel/iwlwifi/mvm/time-event.c module – The driver for supporting Intel wireless connection adapters in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the iwlmvmremovetimeevent function in the drivers/net/wireless/intel/iwlwifi/mvm/time-event.c file of the Intel wireless driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service...

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

...

cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()

...

SUSE-SU-2025:4096-1 Security update for binutils

This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: New versioned release of libsframe.so.2 s390: tools now support SFrame format 2; recognize 'z17' as CPU name bsc1247105, jscIBM-1485 sframe sections are n...

SUSE CVE-2025-40132

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...

Intel CIP elevation of privilege vulnerability (CNVD-2025-28672)

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from improper external control of filenames or paths, and no details of the vulnerability are...

Intel CIP elevation of privilege vulnerability (CNVD-2025-28675)

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause elevation of...