The vulnerability of the SwSmiInputValue() function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, allows attackers to circumvent security restrictions, gain elevated privileges, and execute arbitrary code.

The vulnerability of the SwSmiInputValue function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to bypass security restrictions, gain elevated...

The vulnerability of the SwSmiInputValue() function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, allows attackers to circumvent security restrictions, gain elevated privileges, and execute arbitrary code.

The vulnerability of the SwSmiInputValue function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to bypass security restrictions, gain elevated...

The vulnerability of the SwSmiInputValue() function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, allows attackers to circumvent security restrictions, gain elevated privileges, and execute arbitrary code.

The vulnerability of the SwSmiInputValue function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to bypass security restrictions, gain elevated...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware code base from China Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a corrupted SMM memory in the SMM module...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware code base from China Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a corrupted SMM memory in the SMM module...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China-based Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a stack overflow in the SMI handler...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China's Insyde Insyde Corporation. A security vulnerability exists in InsydeH2O, which originates from an arbitrary call to SmmSetVariable with unsanitized parameters in the SMI handler...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China Insyde Insyde. A security vulnerability exists in InsydeH2O, which stems from an SMRAM memory content leak in the SMM module...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China Insyde Insyde. A security vulnerability exists in InsydeH2O, which stems from a flaw in the SMM module that allows an attacker to write arbitrary code and cause memory corruption...

SUSE CVE-2025-38425

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes...

sudo security update

An update is available for sudo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

RLSA-2025:10110 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: LPE via host option CVE-2025-32462 For...

Exploit for Improper Input Validation in Samsung Samsung_Mobile

PoC exploit for CVE-2016-4038, a 0day vulnerability in System Management Mode code execution for Lenovo ThinkPad model line. The exploit targets the SystemSmmRuntimeRt UEFI driver GUID: 7C79AC8C-5E6C-4E3D-BA6F-C260EE7C172E and allows arbitrary code execution in System Management Mode. The...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the tegra i2c module not validating the SMBUS block read message length, which could result in a buffer overflow...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the dell-wmi-sysman module not verifying the validity of a WMI data block, which could lead to invalid...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: Linux kernel (i2c Tegra): Information disclosure or denial of service via SMBUS block read with invalid length

A flaw was found in the Linux kernel's i2c Tegra driver. A local attacker with high privileges could exploit this vulnerability by providing a specially crafted SMBUS System Management Bus block read message with an invalid length. This could lead to an out-of-bounds read, potentially resulting i...

kernel: Linux kernel (i2c Tegra): Information disclosure or denial of service via SMBUS block read with invalid length

A flaw was found in the Linux kernel's i2c Tegra driver. A local attacker with high privileges could exploit this vulnerability by providing a specially crafted SMBUS System Management Bus block read message with an invalid length. This could lead to an out-of-bounds read, potentially resulting i...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...