The vulnerability of graphic drivers of microprogramming software for Intel processors, related to writing beyond buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of graphics drivers in microprogramming software for Intel processors lies in the ability to execute code beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors allows a hacker to trigger a service failure.

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors is related to pointer dereferencing errors. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of graphic drivers in microprogramming software for Intel processors, related to writing beyond buffer boundaries, allows attackers to exploit their privileges.

The vulnerability of graphics drivers in microprogramming software for Intel processors lies in the ability to execute code beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of graphic drivers in microprogramming software for Intel processors, related to pointer swapping errors, allows attackers to cause system failures.

The vulnerability of graphics drivers in microprogramming software for Intel processors is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of graphic drivers in microprogramming software for Intel processors lies in the absence of quotation marks in the syntax of elements or search paths. This allows attackers to exploit their privileges.

The vulnerability of graphics drivers in microprogramming software for Intel processors is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel processors...

Privilege Escalation

intel-microcode is vulnerable to Privilege Escalation. The vulnerability exists due to a sequence of processor instructions that results in unexpected behavior for certain IntelR Processors. An authenticated user may exploit this issue to potentially enable escalation of privilege, information...

HPESBHF04560 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380 Gen10 G - Prior to HPE OmniSta...

OESA-2023-1855 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denia...

Fedora 37 : microcode_ctl (2023-40e71fe5b9)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-40e71fe5b9 advisory. - Update to upstream 2.1-42. 20231114 - Update of 06-6a-06/0x87 ICX-SP D0 microcode from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 ICL-D ...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:4493-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4493-1 advisory. - Updated to Intel CPU Microcode 20231114 release. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation...

Oracle Linux 7 : kernel (ELSA-2023-7423)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7423 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - net/sched: clsu32: No longer copy tcfresult on update to avoid use-after-free Davide Caratti...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

USN-6497-1: Linux kernel (OEM) vulnerabilities

Maxim Levitsky discovered that the KVM nested virtualization SVM implementation for AMD processors in the Linux kernel did not properly handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a denial of service host kernel crash. CVE-2023-5090 Alon Zahavi discovered that the...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

RHEL 9 : kernel-rt (RHSA-2023:7379)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7379 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

AMD CPU Instruction Malpractice Vulnerability

AMD CPUs are a family of CPUs from AMD. The AMD CPUs suffer from an improper instruction vulnerability that stems from the fact that incorrect or unexpected behavior of the INVD instruction would allow an attacker with a malicious hypervisor to affect the cache line write-back behavior of the CPU...

Google Reveals ‘Reptar’ Vulnerability Threatening Intel Processors

By Deeba Ahmed Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments. This is a post from HackRead.com Read the original post: Google Reveals Reptar Vulnerability Threatening Intel Processors...