CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

HPESBHF04779 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX380 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX360 Gen10 Plus server - Prior t...

HPESBHF04781 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v3.3007-31-2024 HPE ProLiant DX190r Gen10 server - Prior to v3.3007-31-2024 HPE ProLiant DX220n Gen10 Plus server - Prior to...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

SUSE-SU-2025:20092-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240910 release bsc1230400 CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access...

SUSE-SU-2025:0279-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Upgrade to upstream tag jdk-21.0.6+7 January 2025 CPU Security fixes: - CVE-2025-21502: Enhance array handling JDK-8330045, bsc1236278 Other changes: - JDK-6942632: Hotspot should be able to use more than 64 logical processors on Windows...

ARM CPU 安全漏洞

ARM CPUs are a family of central processors from the British company ARM. The ARM CPUs suffer from a security vulnerability that stems from the fact that an unprivileged context can trigger a data memory-related prefetch engine to fetch the contents of a privileged location and use those contents...

CVE-2024-10929

The Spectre-Branch Status Eviction (BSE) vulnerability affects Arm Cortex-A72 (revisions prior to r1p0), Cortex-A73 , and Cortex-A75 processors. The flaw resides in a microarchitectural mechanism that allows an adversary to gain a weak form of control over a victim's branch history despite existi...

PT-2025-1613

Name of the Vulnerable Software and Affected Versions Arm Cortex-A72 versions prior to r1p0 Arm Cortex-A73 affected versions not specified Arm Cortex-A75 affected versions not specified Description The issue may allow an adversary to gain a weak form of control over the victim's branch history...

PT-2025-2403

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore™ for Intel Kaby Lake versions prior to 4.0.1.1012 Phoenix SecureCore™ for Intel Coffee Lake versions prior to 4.1.0.568 Phoenix SecureCore™ for Intel Comet Lake versions prior to 4.2.1.292 Phoenix SecureCore™ for Intel Ice...

CVE-2024-48883

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in ...

SAMSUNG Mobile Processor 安全漏洞

SAMSUNG Mobile Processor is a series of mobile processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Processor that stems from the UE not limiting the number of attempts for the RRC setup process in 5G SA, resulting in a denial of service...

The vulnerability of graphics drivers in microprogramming software for Intel processors arises from incorrect neutralization of special elements in the output data used by the input component. This allows attackers to exploit their privileges.

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to incorrect neutralization of special elements in the output data used by the input component. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the SMEM partition in Qualcomm’s security microprogramming software allows attackers to disclose protected information.

The vulnerability of the SMEM microprogramming software for Qualcomm processors lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

CentOS 9 : microcode_ctl-20241112-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20241112-1.el9 build changelog. - Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a...

PT-2025-21118

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue is related to the incorrect initialization of resources in the branch prediction unit for some IntelR Core Ultra Processors. This may allow an authenticated...

PT-2025-21068

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue concerns incorrect behavior order in some IntelR Core Ultra Processors, potentially allowing an unauthenticated user to enable information disclosure via...

CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

CVE-2024-56721 x86/CPU/AMD: Terminate the erratum_1386_microcode array

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...