5376 matches found
UBUNTU-CVE-2022-2153
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...
PT-2022-22156 · Dell · Dell Edge Gateway 5200
Name of the Vulnerable Software and Affected Versions: Dell Edge Gateway 5200 EGW versions prior to 1.03.10 Description: The issue allows a local malicious user to potentially exploit an operating system command injection vulnerability. This can be done by using a System Management Interrupt SMI ...
Software Guard eXtensions Processor Information Disclosure
The vulnerability of the Software Guard eXtensions SGX processor implementation relates to the possibility of accessing uninitialized data that remains in the APIC Advanced Programmable Interrupt Controller registers. Exploiting this vulnerability can allow an attacker to gain access to protected...
Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability
A flaw was found in hw. The APIC can operate in xAPIC mode also known as a legacy mode, in which APIC configuration registers are exposed through a memory-mapped I/O MMIO page. This flaw allows an attacker who can execute code on a target CPU to query the APIC configuration page. When reading the...
hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability
A flaw was found in hw. The APIC can operate in xAPIC mode also known as a legacy mode, in which APIC configuration registers are exposed through a memory-mapped I/O MMIO page. This flaw allows an attacker who can execute code on a target CPU to query the APIC configuration page. When reading the...
PT-2022-4127
Name of the Vulnerable Software and Affected Versions IntelR Processors versions 10 through 12 IntelR Processors affected versions not specified Description The issue is related to improper isolation of shared resources in some IntelR Processors, which may allow a privileged user to potentially...
CVE-2022-26861
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM...
CVE-2022-26859
Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM...
CVE-2022-26858
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...
GSD-2022-1004899 tty: goldfish: Fix free_irq() on remove
tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.285 by commit c4b0b8edccb0cfb15a8cecf4161e0571d3daac6...
PT-2025-25949
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the kernel will crash if an interrupt is raised when there is no descriptor in the channel. This is resolved by checking the result ...
PT-2022-9751 · Amd · Athlon™ Series +33
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A malformed SMI command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SM...
CVE-2022-26864
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
PT-2023-13379 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by using a specifically timed DMA transacti...
Dell BIOS input validation error vulnerability
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to bypass security controls in SMM by sending malicious input to SMI...
Dell BIOS input validation error vulnerability
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to bypass security controls in SMM by sending malicious input to SMI...
Linux kernel code vulnerabilities
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a code issue vulnerability that stems from a NULL pointer dereference problem in kvmirqdeliverytoapicfast. An attacker exploiting this vulnerability could trigger a denial of...
CVE-2022-26864
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
CVE-2022-26862
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...