2025.1 IPU - 13th and 14th Generation Intel® Core™ Processor Advisory

Summary: A potential security vulnerability in some 13th and 14th Generation Intel® Core™ Processors may allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39355 Description: Improp...

UEFI Firmware Advisory

Summary: Potential security vulnerabilities in the UEFI firmware for some Intel® Processors may allow escalation of privilege or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-31155 Description:...

UBUNTU-CVE-2024-31068

Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...

Last-Level Cache Attack

AMD ID: AMD-SB-7032 Potential Impact: N/A Severity: N/A Summary Researchers from Wuhan University have provided AMD with a paper titled “ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors” in which they discuss prime and probe attacks targeting the Last-Level Cache LLC...

AMD SMM Callout Vulnerability

AMD ID: AMD-SB-7028 Potential Impact: Arbitrary Code Execution Severity: High Summary AMD SMM callout vulnerability in the AmdPlatformRasSspSmm driver supported on multiple processors. Eclypsium reported an SMM callout vulnerability within the AmdPlatformRasSspSmm UEFI module, which is supported ...

Intel UPLR2 Xeon Processor BIOS Security Updates

Intel has informed HP of potential security vulnerabilities in firmware for some Intel® Xeon® Processors, which might allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released...

CVE-2022-21198

Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26006

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21781

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access...

CVE-2024-21829

Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-32504

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper length checking, which can result in an OOB Out-of-Bounds Write vulnerability...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

HPESBHF04781 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v3.3007-31-2024 HPE ProLiant DX190r Gen10 server - Prior to v3.3007-31-2024 HPE ProLiant DX220n Gen10 Plus server - Prior to...

HPESBHF04779 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX380 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX360 Gen10 Plus server - Prior t...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

SUSE-SU-2025:20092-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240910 release bsc1230400 CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access...