8143 matches found
CVE-2022-50327
CVE-2022-50327 in the Linux kernel concerns ACPI: processor: idle where acpi_fetch_acpi_dev() could return NULL, causing a NULL pointer dereference in acpi_device_hid(). The connected Nessus/SUSE advisories confirm this CVE is addressed in kernel live patches for SUSE SLES15 SP5 (multiple patches...
CVE-2022-50327 ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The return value of acpifetchacpidev could be NULL, which would cause a NULL pointer dereference to occur in acpidevicehid. rjw: Subject and changelog edits, added empty...
CVE-2023-53254 cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Fix sharedcpumap to handle shared caches at different levels The cacheinfo sets up the sharedcpumap by checking whether the caches with the same index are shared between CPUs. However, this will trigger...
CVE-2022-50296 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
In the Linux kernel, the following vulnerability has been resolved: UM: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS is selected, cpumaxbitswarn generates a runtime warning similar as below while we show /proc/cpuinfo. Fix this by using...
CVE-2023-53215 sched/fair: Don't balance task to its current running CPU
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the balancer tries to balance a migration disabled task and trigger the warning in settaskcpu like below: ------------ cut here ------------...
CVE-2023-53208
CVE-2023-53208 : Linux kernel KVM nested virtualization flaw where L1’s TSC multiplier is loaded based on L1 state instead of L2, causing a mismatch that userspace can trigger via MSR writes and guest CPUID changes. The fix ensures L1’s multiplier is loaded when exiting nested VM, preventing the ...
CVE-2023-53205
CVE-2023-53205 affects the Linux kernel KVM on s390, specifically the diag 9c handler where a race exists around the target CPU value (-1). The fix stores the physical target CPU in a local variable to prevent out-of-bounds accesses to CPU arrays. The CVE’s risk is described as high (CVSS v3.1: A...
CVE-2025-41713
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration...
PT-2025-37621
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to the Coresight TRBE Trace Recording and Broadcast Engine component. Specifically, the cpuhp state add instance and cpuhp state remove instanc...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly removing the cpuhp instance node, which could result in warnings or inconsistent state...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly locking physical CPU numbers, which could lead to out-of-bounds access to arrays...
Amazon Linux 2023 : microcode_ctl (ALAS2023-2025-1189)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1189 advisory. A potential security vulnerability in some Intelr Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential...
The vulnerability of the HTTP header processor in the microprogramming software of the Mercury KM08-708H GiGA WiFi Wave2 allows a hacker to execute arbitrary code.
The vulnerability of the HTTP header handler in the microprogramming software solution Mercury KM08-708H GiGA WiFi Wave2 lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted...
x86/vmscape: Add conditional IBPB mitigation
...
PT-2025-40632
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4+ 1 Description The Linux kernel contained an issue in the crypto/ccp module where the sev platform shutdown locked function was called with a NULL argument, leading to a NULL pointer dereference during...
CVE-2025-39799
CVE-2025-39799 entry is rejected/not used; not an active vulnerability.
PT-2025-44104
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s fastrpc implementation that could lead to a map leak. A failure within the copy to user function could result in an early return without properly...
The vulnerability of the Terraform file processor tool for static code analysis by Prisma Cloud allows a attacker to execute arbitrary code.
The vulnerability of the Terraform file processor tool for static code analysis by Prisma Cloud is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2025-37333
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw related to ACPI processor performance object handling. A check for pr-performance was added in a previous commit, which prevented frequency QoS request...