CVE-2022-21131

CVE-2022-21131 describes improper access control on some Intel Xeon processors that could allow an authenticated local user to disclose information. The available connected sources confirm this as a local access vulnerability affecting Intel Xeon CPUs and note remediation through microcode update...

Intel Processors 安全漏洞

Intel Processors is an American Intel company that provides interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in Intel Processors, which can be exploited by an authenticated attacker to disclose information...

Intel Xeon Processors 输入验证错误漏洞

Intel Xeon Processors is an Intel Xeon family of central processing units CPUs from Intel Corporation USA. A security vulnerability exists in Intel Xeon Processors that originates from an input validation error. An attacker can exploit this vulnerability to launch a denial of service attack...

Intel Processors 安全特征问题漏洞

Intel Processors are American Intel Corporation's offerings to interpret computer instructions and process data in computer software. A security vulnerability exists in Intel Processors. An unauthenticated attacker could exploit the vulnerability to elevate privileges...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's offerings to interpret computer instructions and process data in computer software. Intel Processors has a security vulnerability that can be exploited by attackers to disclose information...

AMD Processors 数据伪造问题漏洞

AMD Processors is a processor from AMD. A data forgery vulnerability exists in AMD Processors that stems from insufficient process type checking in Trusted OS, which allows an attacker to cause a denial of service by enabling a less privileged process to unmap memory owned by a more privileged...

CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

Design/Logic Flaw

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

CVE-2021-26400

CVE-2021-26400 concerns AMD processors where speculative re-ordering of load instructions can cause stale data to be observed across multiple CPUs accessing shared memory, enabling potential data leakage. The connected AMD bulletin AMD-SB-1035 documents the issue as Speculative Load Disordering w...

AMD processors 安全漏洞

AMD Processors is a processor from the American company AMD. AMD processors suffers from a security vulnerability that stems from the fact that AMD processors can infer load instructions, leading to a potential data leak...

PT-2022-3803 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to insufficient control flow management in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

AMD EPYC DRTM UApp 安全漏洞

AMD EPYC is an x86 architecture server microprocessor product line from AMD Semiconductor, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in the AMD EPYC DRTM UApp. The vulnerability arises from a partial initialization of the DRTM UApp, which...

AMD EPYC SEV-ES TMR 安全漏洞

AMD EPYC is an x86 server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC SEV-ES TMR. An attacker could exploit this vulnerability to cause a loss of memory integrity in SNP-active VMs...

NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0046)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcodectl packages installed that are affected by multiple vulnerabilities: - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-129-01)

The version of kernel-generic installed on the remote host is prior to 5.15.38 / 5.15.38smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-129-01 advisory. - Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may...

Ciphertext Side Channels on AMD SEV

Bulletin ID: AMD-SB-1033 Potential Impact: Data leakage Severity: Medium Summary AMD received notification of a potential security vulnerability where data in specific cryptographic algorithms can be inferred in a SEV guest by monitoring the ciphertext values over time. Researchers from the...

PT-2022-4314 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some Intel Processors. This may allow a privileged user to potentially enable escalation of privilege via...

PT-2022-4323 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an observable behavioral discrepancy in some IntelR Processors, which may allow an authorized user to potentially enable information disclosure via local...

PT-2022-3804 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper access control in the BIOS authenticated code module for some Intel Processors. This may allow a privileged user to potentially enable escalation o...