4355 matches found
UBUNTU-CVE-2023-49100
Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdeiinterruptbind. The parameter is passed to a call to platicgetinterrupttype. It can be any arbitrary value passing...
PT-2024-13674 · Unknown +1 · Arm Trusted Firmware +1
Name of the Vulnerable Software and Affected Versions: Trusted Firmware-A TF-A versions prior to 2.10 Description: The issue is related to a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdei interrupt bind...
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution which might allow local users to gain privileges by triggering an NMI.
...
PT-2024-21467 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the protection of updates of 64-bit statistics counters in the Linux kernel. A comment in explains that the write side of struct u64 stats sync must ensure mutu...
kernel: writeback: avoid use-after-free after removing device
In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdiunregister gets called to stop further writeback and wait for associated delayed work to complete. However, wbinodewritebackend may schedule bandwid...
PT-2024-26795
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns preventing nullptr exceptions on ISR in the Linux kernel. Specifically, it involves checking for a valid interrupt handler when phydev-irq is set unconditionally, or...
PT-2024-21510
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock at set capacity in the Linux kernel. This occurs due to an interrupt unsafe locking scenario where aoeblk gdalloc holds &d-lock and attempts ...
The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to gain access to read, modify, or delete data. This can enable the hacker to increase their privileges, execute arbitrary code, or cause a service failure.
The vulnerability of the SBIOS system’s NVIDIA DGX A100 server stems from the transition to System Management Mode SMM due to an SMI interrupt. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete data access rights, enhance their privileges, execute arbitrary code,...
NVIDIA DGX Security Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 Servers, which stems from an attacker could lead to an SMI markup vulnerability that could be used to execute arbitrary code at the SMM level...
ALPINE-CVE-2023-46836
The fixes for XSA-422 Branch Type Confusion and XSA-434 Speculative Return Stack Overflow are not IRQ-safe. It was believed that the mitigations always operated in contexts with IRQs disabled. However, the original XSA-254 fix for Meltdown XPTI deliberately left interrupts enabled on two entry...
PT-2024-14632
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the addition of a mutex lock in the control vblank irq to synchronize vblank enable/disable operations happening from different threads, preventing race condition...
PT-2024-14634
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the rkisp1 isp stop and rkisp1 csi disable functions in the Linux kernel, where the driver masks interrupts and then proceeds with the stop procedure, assuming the...
The vulnerability of the IRQ Handler component in the Xen hypervisor allows a hacker to disclose protected information.
The vulnerability of the IRQ Handler component in the Xen hypervisor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...
The Non-Maskable Interrupt Button on a NetScaler Appliance
This article contains information about using Non-Maskable Interrupt NMI button on a NetScaler appliance. Requirements Review the NetScaler MPXHardware Platforms and NetScaler SDX Hardware Platforms page, to verify the NetScaler platforms that have the NMI button. NMI Button If the NetScaler...
CVE-2023-31100
Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: from 4.3.0.0 before 4.3.0.203 from 4.3.1.0 before 4.3.1.163 from 4.4.0.0 before 4.4.0.217 from 4.5.0.0 before 4.5.0.138...
CVE-2023-45624
An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...
CVE-2023-45623
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...
Design/Logic Flaw
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...
Design/Logic Flaw
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...
Design/Logic Flaw
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...