PT-2022-21346 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a Stack-Based Buffer Overflow. A local authenticated malicious user may potentially exploit this by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32492

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32486

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Dell BIOS input validation error vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to obtain arbitrary code execution in SMRAM by using SMI...

PT-2022-6364 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to the use of an uninitialized variable in the BIOS software of Dell laptops. This could potentially allow a malicious user to execute arbitrary code. A local...

Qualcomm Embedded Kernel Code Execution

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to improper processing of parallel operations by the supervisor for enabling or disabling IRQ signals. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

PT-2025-49632

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7 Description The Linux kernel contains a flaw in the 'uio dmem genirq' component related to interrupt handling. A missing unlock within the interrupt configuration process can lead to a...

CVE-2022-36448

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver...

Insyde InsydeH2O: Input validation error vulnerability

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in the Insyde InsydeH2O kernel versions 5.0 to 5.5, which ste...

Insyde InsydeH2O security vulnerabilities

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in the Insyde InsydeH2O kernel versions 5.0 to 5.5, which ste...

CVE-2022-35896

An issue SMM memory leak vulnerability in SMM driver SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure...

Insyde InsydeH2O buffer error vulnerability

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which arises from a failure of the...

PT-2022-7437 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the request threaded irq function in the gpiolib component of the Linux kernel, which can cause a repeated release of memory, potentially leading to a denial of...

GSD-2022-1006322 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006280 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006188 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006069 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1006014 RDMA/hns: Fix incorrect clearing of interrupt status register

RDMA/hns: Fix incorrect clearing of interrupt status register This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005920 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005848 RDMA/hns: Fix incorrect clearing of interrupt status register

RDMA/hns: Fix incorrect clearing of interrupt status register This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...