AZL-66464 CVE-2025-38585 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

CVE-2025-38559

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

DEBIAN-CVE-2025-38559

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

UBUNTU-CVE-2025-38559

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

CVE-2025-38585

CVE-2025-38585 concerns Linux kernel staging/atomisp: a stack buffer overflow in gmin_get_var_int() triggered when gmin_get_config_var() calls EFI get_variable() with a larger-than-expected EFI variable. The bug stems from two issues: (1) gmin_get_config_var() returning a stale error code on EFI ...

CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

CVE-2025-38559 platform/x86/intel/pmt: fix a crashlog NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

CVE-2025-38559 platform/x86/intel/pmt: fix a crashlog NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

CVE-2025-38559

CVE-2025-38559 (Linux kernel) affects the Intel PMT subsystem on x86 platforms. The issue is a NULL pointer dereference in intel_pmt_read() when an ep (endpoint) is missing, leading to kernel oops in crashlog handling. The fix, as described, augments intel_pmt_entry with a pointer to the pcidev t...

CVE-2025-38559

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

SUSE SLES11: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2025:02844-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02844-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

HPESBHF04933 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processor BIOS, INTEL-SA-01308, Intel Xeon 6 Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 - Prior to 1.4005-22-202...

HPESBHF04934 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processor BIOS, INTEL-SA-01310, Intel OOBM Services Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 -Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 -Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 -Prior to 1.4005-22-2025 H...

Intel PROSet/Wireless WiFi Memory Use After Free DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Intel PROSet/Wireless WiFi Buffer Overflow DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Intel Ethernet Connections Boot Utility Privilege Escalation

The vulnerability of microprogrammed network adapter software in Intel Ethernet Connections Boot Utility is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel PROSet/Wireless WiFi Race Situation DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Administrative Tools Component Privilege Escalation

The vulnerability of the Administrative Tools component of Intel Network Adapter microprogramming software relates to competitive access to resources state of competition. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information and enhance their...

Intel Resource Capacity DoS

The vulnerability of Intel microprogramming software is related to insufficient resources. Exploiting this vulnerability can allow a hacker to cause malfunctions in the system’s operation...

Intel Slim Bootloader Privilege Escalation

The vulnerability of the Intel Slim Bootloader is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...