Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing null entry in the erratum1386microcode array on the x86/CPU/AMD subsystem...

The vulnerability of the SMI transfer monitor (STM) in microprogramming software for Intel processors allows attackers to enhance their privileges.

The vulnerability of the SMI transfer monitor STM in microprogramming software for Intel processors is related to improper handling of certain operations. Exploiting this vulnerability can allow an attacker to enhance their privileges...

DEBIAN-CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

PT-2024-23746

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper Finite State Machines FSMs in the hardware logic of some IntelR Processors. This may allow a privileged user to potentially enable denial of service...

USN-7149-1 intel-microcode vulnerabilities

Avraham Shalev and Nagaraju N Kodalapura discovered that some IntelR XeonR processors did not properly restrict access to the memory controller when using IntelR SGX. This may allow a local privileged attacker to further escalate their privileges. CVE-2024-21820, CVE-2024-23918 It was discovered...

HPESBHF04690 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 170r Gen10 Server - Prior to HPE SimpliVity Gen10 Support Pack SVTSP...

HPESBHF04754 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01111, UPLR2 - Intel ACTM Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22185 |...

HPESBHF04753 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01071 - 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 380 Gen10 G - Prior to H...

HPESBHF04755 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01085, UPLR2 - Intel UEFI Firmware Advisory, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-25565 |...

HPESBHF04752 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01097 - Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129...

HPESBHF04751 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01101, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen 11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-21853 |...

CVE-2024-5660

Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...

CVE-2024-5660

Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...

CVE-2024-5660

Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...

PT-2024-36907

Name of the Vulnerable Software and Affected Versions Arm Cortex processors versions A77 through X925, including A78, A78C, A78AE, A710, X1, X1C, X2, X3, X4, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 Description The use of Hardware Page Aggregation HPA and Stage-1 and/or...

ROS-20241209-02

A vulnerability in some IntelR TDX modules is related to improper input validation. Exploitation of the vulnerability could allow a privileged attacker to potentially escalate privileges through local access. Vulnerability related to processor instruction sequencing causes unexpected behavior on...

OESA-2024-2524 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: CVE-2024-21820 CVE-2024-21853...

CVE-2024-11149

In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...

OpenBSD 安全漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD organization. A security vulnerability exists in versions of OpenBSD prior to 7.4 that stems from vmm not properly recovering the GDTR limit on Intel CPUs...

UBUNTU-CVE-2024-53114

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE, but using these instructions is reported to be a cause of a random host reboot. Thes...