AMD EPYC Security Vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD Semiconductor, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in AMD EPYC™ Processors that stems from insufficient data authenticity validation in AGESA, resulting in a...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 server microprocessor product line from AMD Semiconductor, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC™ Processors. The vulnerability can be exploited to write to the SPI flash memory to execute arbitrary cod...

SEV-SNP Firmware Vulnerabilities

Bulletin ID: AMD-SB-3007 Potential Impact: Data leakage CVE-2023-31346 and loss of integrity CVE-2023-31347 Severity: Refer to the CVE Details section Summary This bulletin addresses two SEV firmware vulnerabilities reported by an external researcher. Refer to the CVE Details section below. CVE...

AMD Embedded Processors Vulnerabilities – February 2024

Bulletin ID: AMD-SB-5001 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Embedded processors were reported, and mitigations are being provided through Platform Initialization PI firmware packages. CVE...

PT-2024-11954

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap overflow occurs in the SMM System Management Mode module. An attacker who possesses a second vulnerability allowing writes to the SPI Serial Peripheral...

AMD Processor Vulnerabilities

Bulletin ID: AMD-SB-7009 Potential Impact: Refer to the CVE Details section Severity: Refer to the CVE Details section Summary Researchers disclosed multiple potential vulnerabilities that may impact some AMD processors. AMD has assessed the researchers’ findings and is publishing CVEs and...

AMD Embedded Processors Security Vulnerability

AMD Embedded Processors is a family of embedded high-performance GPUs from UltraMicroelectronics AMD. A security vulnerability exists in AMD Embedded Processors that stems from insufficient memory buffer checking in ASP...

Intel® Server OpenBMC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® OpenBMC firmware may allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32280 Description: Insufficiently...

HPESBHF04591 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7009: AMD Processor Vulnerabilities Security Notice, Local Arbitrary Code Execution

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL345 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL365 Gen11 Server - Prior to v1.5801042024 HPE...

HPESBHF04592 rev.1 - Certain HPE ProLiant Servers Using Certain AMD EPYC Processors, AMD-SB-3007: SEV Firmware Vulnerabilities, Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access to Data, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL345 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL365 Gen1...

MGASA-2024-0028 Updated microcode fixes bugs and a security vulnerability

The updated package contains microcode updates for Intel and AMD CPUs, including a fix for a security vulnerability: Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

USN-6604-2: Linux kernel (Azure) vulnerabilities

It was discovered that the ASUS HID driver in the Linux kernel did not properly handle device removal, leading to a use-after-free vulnerability. A local attacker with physical access could plug in a specially crafted USB device to cause a denial of service system crash. CVE-2023-1079 Jana Hofman...

Ubuntu: Security Advisory (USN-6602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-6602-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6602-1 advisory. Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from divisio...

PT-2024-1106

Name of the Vulnerable Software and Affected Versions GPU vendors and host devices affected, including Apple, AMD, Qualcomm, and Imagination GPUs. Specific affected versions are not specified, but it is mentioned that the issue affects various architectures and devices, including some iPhone, iPa...

GPU Memory Leaks

Bulletin ID: AMD-SB-6010 Potential Impact: Data leakage Severity: Medium Summary Researchers from Trail of Bits reported a potential vulnerability, titled “LeftoverLocals.” According to their research, a compromised GPU kernel could potentially read local memory values from another kernel...