108 matches found
CVE-2023-27517
The CVE-2023-27517 entry concerns Intel Optane PMem software with improper access control that could allow an authenticated local user to escalate privileges. Affected components are Intel Optane PMem software prior to 01.00.00.3547, 02.00.00.3915, and 03.00.00.0483. The vulnerability’s base impa...
CVE-2023-22311
Improper access control in some IntelR OptaneTM PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-22311
CVE-2023-22311 affects Intel Optane PMem 100 Series Management Software prior to 01.00.00.3547. The issue is improper access control that may allow an authenticated user to escalate privileges via local access. The vulnerability is documented in Intel advisory INTEL-SA-00948 and related CVE entri...
Intel Optane Pmem Security Vulnerability
Intel Optane Pmem is a memory device from Intel Corporation USA. A security vulnerability previously existed in Intel Optane Pmem versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483, which stemmed from improper access control in the affected product. It could result in an authenticated user...
Intel Optane Pmem Security Vulnerability
Intel Optane Pmem is a memory device from Intel Corporation USA. A security vulnerability previously existed in Intel OptaneTM PMem 100 Series Management Software version 01.00.00.3547, which stemmed from improper access control. It could result in an authenticated user potentially being able to...
Intel® Optane™ PMem Management Software Advisory
Summary: Potential security vulnerabilities in some Intel® Optane™ Persistent Memory PMem management software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-22311 Description: Improper acce...
PT-2025-38041
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-xfstests-00056-g131086faa369 139 Description A flaw exists in the Linux kernel related to the ext2/dax subsystem. Specifically, the ext2 setsize function does not handle page-aligned lengths correctly,...
PT-2022-36084 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a potential memory leak in the cxl/pmem module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
GSD-2022-1006269 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...
GSD-2022-1006175 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...
GSD-2022-1006049 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...
GSD-2022-1005901 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005656 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...
PT-2022-33914 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a platform-device leak in the error path of the x86/pmem component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2022-34433 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to a platform-device leak in the error path of the x86/pmem component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2022-34159 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a platform-device leak in the error path of the x86/pmem component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
GSD-2022-1005332 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
CVE-2021-0083
Improper input validation in some IntelR OptaneTM PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-0083
Improper input validation in some IntelR OptaneTM PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access...
Input validation
Improper input validation in some IntelR OptaneTM PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access...