2025.2 IPU, Intel® Processor Stream Cache Advisory

Summary: A potential security vulnerability in some Intel® Processor stream cache mechanisms may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20109 Description: Improper Isolation or...

Intel® Xeon® 6 Scalable Processors Advisory

Summary: A potential security vulnerability in Intel® Xeon® 6 Scalable processors may allow escalation of privilege. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22840 Description: Sequence of processor instructions leads t...

PT-2025-32710

Name of the Vulnerable Software and Affected Versions: IntelR XeonR processors affected versions not specified Description: A missing reference to an active allocated resource in some IntelR XeonR processors may allow an authenticated user to potentially enable a denial of service via local acces...

PT-2025-32757

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Processors affected versions not specified Description: An improperly implemented security check for standard in the DDRIO configuration may allow a privileged user to potentially enable escalation of privilege via local access...

Intel Processors 安全漏洞

Intel Processors is a family of processors from Intel Corporation USA. A security vulnerability exists in Intel Processors that stems from an improperly isolated stream caching mechanism that could lead to elevated privileges...

Intel Xeon Processors 安全漏洞

Intel Xeon Processors is a family of processors launched by Intel for the enterprise-class server, workstation, and high-performance computing HPC markets, mainly serving data centers, cloud computing, artificial intelligence, and other areas. A denial of service vulnerability exists in Intel Xeo...

Intel Xeon Processor 缓冲区错误漏洞

Intel Xeon Processors is a family of processors launched by Intel for the enterprise-class server, workstation, and high-performance computing HPC markets, mainly serving data centers, cloud computing, artificial intelligence, and other areas. Intel Xeon Processors is vulnerable to an elevation o...

PT-2025-32717

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Scalable processors affected versions not specified Description: A sequence of processor instructions can lead to unexpected behavior in some IntelR XeonR 6 Scalable processors. This may allow an authenticated user to potential...

PT-2025-32725

Name of the Vulnerable Software and Affected Versions: IntelR XeonR processors affected versions not specified Description: Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware may allow a privileged user to potentially enable escalation of privilege via local...

Linux Distros Unpatched Vulnerability : CVE-2024-28956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user ...

AMD Embedded Vulnerabilities – August 2025

Summary Potential vulnerabilities in AMD Embedded processors were reported, and mitigations are being provided through Platform Initialization PI firmware packages...

Intel DSA 代码问题漏洞

Intel DSA is a hardware gas pedal built into Intel® Xeon® Scalable processors that accelerates storage, networking, and data analytics workloads by offloading data transfer tasks to dedicated hardware, freeing up CPU resources for other tasks. Intel DSA suffers from an uncontrolled search path...

PT-2025-32716

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Scalable processors affected versions not specified Description: Insufficient granularity of access control in the Out-of-Band Management System OOB-MSM may allow a privileged user to potentially enable escalation of privilege...

Linux Distros Unpatched Vulnerability : CVE-2021-46910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging co...

AMD Graphics Vulnerabilities – August 2025

Summary Audits performed on AMD graphics and datacenter accelerator products, as well as external reports received by AMD, uncovered potential vulnerabilities affecting AMD graphics, datacenter, and some client processors...

Intel® OOBM Services Module Advisory

Summary: A potential security vulnerability in the out of band management service module OOB-MSM for some Intel® Xeon® 6 processors may allow escalation or privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22839...

HPESBHF04922 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processors, INTEL-SA-01311, Intel Xeon 6 Processor with Intel TDX Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 - Prior to 1.4005-22-202...

HPESBHF04929 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.5004-22-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.5004-22-2025 U63 ROM Family HPE StoreEasy 1570 Performance -...

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array

A flaw was found in the AMD CPU erratum handling code in the Linux kernel. The erratum1386microcode array lacked a proper terminator, which could cause the x86matchcpuwithstepping function to read beyond the end of the array. This results in undefined behavior during CPU feature detection and...

Linux Distros Unpatched Vulnerability : CVE-2023-20593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 Note...