CVE-2024-39343

CVE-2024-39343 affects Samsung’s Mobile Processor and Wearable Processor baseband (Exynos 2100/1280/2200/1330/1380/1480/2400/9110 and Modem 5123/5300). The root cause is that baseband software does not properly validate the length specified by the Mobility Management (MM) module, which can lead t...

CVE-2024-39890

CVE-2024-39890 affects Samsung baseband software in multiple Exynos lines (Mobile Processor, Wearable Processor, Modem) including Exynos 980–9825, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920/W930/W1000, as well as Modems 5123 and 5300. The issue is that the baseband does ...

MGASA-2024-0377 Updated microcode packages fix security vulnerabilities

Improper Finite State Machines FSMs in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially enable denial of service via local access. CVE-2024-21853 Improper conditions check in some Intel® Xeon® processor memory controller...

SUSE-SU-2024:4053-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

The vulnerability of the Intel Alias Checking Trusted Module (Intel ACTM), a microprogramming software component for Intel’s 4th and 5th generation processors, allows attackers to exploit it to increase their privileges.

The vulnerability of the Intel Alias Checking Trusted Module Intel ACTM, a microprogramming software component of Intel’s 4th and 5th generation processors, is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to increase their...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-25565

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

ALPINE-CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36242

CVE-2024-36242 is an Intel Processor (SPP) vulnerability described in multiple sources as a protection mechanism failure that could allow an authenticated local user to escalate privileges. The CVE affects Intel processors through the Sub-Page write Permissions (SPP) mechanism, with CVSS v3.1 bas...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24985

CVE-2024-24985 affects Intel processors with Intel ACTM, enabling potential local privilege escalation by exposing a resource to the wrong sphere. Descriptions in multiple sources (Intel ACTM advisory, Red Hat, HP BIOS updates) confirm the issue and recommend applying firmware/BIOS mitigations pr...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...