<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 06:02:05 +0000</lastBuildDate>
    <item>
      <title>ALSA-2024:7481 — Important: linux-firmware security update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2024:7481</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: iwl100-firmware, AlmaLinux:8: iwl1000-firmware, AlmaLinux:8: iwl105-firmware, AlmaLinux:8: iwl135-firmware, AlmaLinux:8: iwl2000-firmware, AlmaLinux:8: iwl2030-firmware, AlmaLinux:8: iwl3160-firmware, AlmaLinux:8: iwl3945-firmware, AlmaLinux:8: iwl4965-firmware, AlmaLinux:8: iwl5000-firmware and 11 more&lt;/p&gt;
&lt;p&gt;The linux-firmware packages contain all of the firmware files that are required by various devices to operate.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584)
* kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: iwl100-firmware, AlmaLinux:8: iwl1000-firmware, AlmaLinux:8: iwl105-firmware, AlmaLinux:8: iwl135-firmware, AlmaLinux:8: iwl2000-firmware, AlmaLinux:8: iwl2030-firmware, AlmaLinux:8: iwl3160-firmware, AlmaLinux:8: iwl3945-firmware, AlmaLinux:8: iwl4965-firmware, AlmaLinux:8: iwl5000-firmware and 11 more&lt;/p&gt;
&lt;p&gt;The linux-firmware packages contain all of the firmware files that are required by various devices to operate.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584)
* kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2024:7481</guid>
    </item>
    <item>
      <title>bdu:2025-03959</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2025-03959</link>
      <description>bdu:2025-03959</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2025-03959</guid>
    </item>
    <item>
      <title>certfr-2024-avi-0958 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0958</link>
      <description>certfr-2024-avi-0958</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2024-avi-0958</guid>
    </item>
    <item>
      <title>EUVD-2026-199457</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-199457</link>
      <description>EUVD-2026-199457</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-199457</guid>
    </item>
    <item>
      <title>fkie_cve-2023-20584</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2023-20584</link>
      <description>&lt;p&gt;IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2023-20584</guid>
    </item>
    <item>
      <title>GHSA-7cfh-j5pv-fw3c</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-7cfh-j5pv-fw3c</link>
      <description>&lt;p&gt;IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-7cfh-j5pv-fw3c</guid>
    </item>
    <item>
      <title>gsd-2023-20584</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2023-20584</link>
      <description>gsd-2023-20584</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2023-20584</guid>
    </item>
    <item>
      <title>OESA-2024-2549 — linux-firmware security update</title>
      <link>https://cve.radiocsirt.org/vuln/oesa-2024-2549</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: linux-firmware&lt;/p&gt;
&lt;p&gt;This package contains firmware images required by some devices.&#13;
&#13;
Security Fix(es):&#13;
&#13;
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.(CVE-2023-20584)&#13;
&#13;
Incomplete system memory cleanup in SEV firmware could
allow a privileged attacker to corrupt guest private memory, potentially
resulting in a loss of data integrity.(CVE-2023-31356)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: linux-firmware&lt;/p&gt;
&lt;p&gt;This package contains firmware images required by some devices.&#13;
&#13;
Security Fix(es):&#13;
&#13;
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.(CVE-2023-20584)&#13;
&#13;
Incomplete system memory cleanup in SEV firmware could
allow a privileged attacker to corrupt guest private memory, potentially
resulting in a loss of data integrity.(CVE-2023-31356)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/oesa-2024-2549</guid>
    </item>
    <item>
      <title>RHSA-2024:7418 — Red Hat Security Advisory: linux-firmware security update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2024:7418</link>
      <description>&lt;p&gt;kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2024:7418</guid>
    </item>
    <item>
      <title>RHSA-2024:7481 — Red Hat Security Advisory: linux-firmware security update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2024:7481</link>
      <description>&lt;p&gt;kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity hw: amd: SMM Lock Bypass kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity hw: amd: SMM Lock Bypass kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2024:7481</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2023-20584</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-20584</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:24.04:LTS: amd64-microcode&lt;/p&gt;
&lt;p&gt;IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:24.04:LTS: amd64-microcode&lt;/p&gt;
&lt;p&gt;IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-20584</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-1837 — AMD Prozessoren: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1837</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor und AMD Radeon ausnutzen, um beliebigen Programmcode auszuführen, erhöhte Rechte zu erlangen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen preiszugeben.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor und AMD Radeon ausnutzen, um beliebigen Programmcode auszuführen, erhöhte Rechte zu erlangen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen preiszugeben.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1837</guid>
    </item>
  </channel>
</rss>
