https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:03:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03956 bdu:2025-03956 https://cve.radiocsirt.org/vuln/bdu:2025-03956 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0693 certfr-2024-avi-0693 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0693 https://cve.radiocsirt.org/vuln/essa-2024:0627 <p>Important: linux-firmware security update for 7.0</p> <p>Important: linux-firmware security update for 7.0</p> https://cve.radiocsirt.org/vuln/essa-2024:0627 https://cve.radiocsirt.org/vuln/euvd-2026-162729 EUVD-2026-162729 https://cve.radiocsirt.org/vuln/euvd-2026-162729 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31315 <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.</p> <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-31315 https://cve.radiocsirt.org/vuln/ghsa-7r5c-r5ww-995h <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.</p> <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-7r5c-r5ww-995h https://cve.radiocsirt.org/vuln/gsd-2023-31315 gsd-2023-31315 https://cve.radiocsirt.org/vuln/gsd-2023-31315 https://cve.radiocsirt.org/vuln/icsa-25-044-09 <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> https://cve.radiocsirt.org/vuln/icsa-25-044-09 https://cve.radiocsirt.org/vuln/oesa-2024-2104 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: linux-firmware, openEuler:20.03-LTS-SP4: linux-firmware, openEuler:22.03-LTS-SP1: linux-firmware, openEuler:24.03-LTS: linux-firmware, openEuler:22.03-LTS-SP4: linux-firmware</p> <p>This package contains firmware images required by some devices.</p> <p>Security Fix(es):</p> <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.(CVE-2023-31315)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: linux-firmware, openEuler:20.03-LTS-SP4: linux-firmware, openEuler:22.03-LTS-SP1: linux-firmware, openEuler:24.03-LTS: linux-firmware, openEuler:22.03-LTS-SP4: linux-firmware</p> <p>This package contains firmware images required by some devices.</p> <p>Security Fix(es):</p> <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.(CVE-2023-31315)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2104 https://cve.radiocsirt.org/vuln/rhba-2024:5645 <p>hw: amd: SMM Lock Bypass</p> <p>hw: amd: SMM Lock Bypass</p> https://cve.radiocsirt.org/vuln/rhba-2024:5645 https://cve.radiocsirt.org/vuln/suse-su-2024:2911-1 <p>Security update for kernel-firmware</p> <p>Security update for kernel-firmware</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2911-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-31315 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: amd64-microcode, Ubuntu:Pro:16.04:LTS: amd64-microcode, Ubuntu:Pro:18.04:LTS: amd64-microcode, Ubuntu:20.04:LTS: amd64-microcode, Ubuntu:22.04:LTS: amd64-microcode, Ubuntu:24.04:LTS: amd64-microcode</p> <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: amd64-microcode, Ubuntu:Pro:16.04:LTS: amd64-microcode, Ubuntu:Pro:18.04:LTS: amd64-microcode, Ubuntu:20.04:LTS: amd64-microcode, Ubuntu:22.04:LTS: amd64-microcode, Ubuntu:24.04:LTS: amd64-microcode</p> <p>Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-31315 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1807 <p>Ein lokaler Angreifer kann eine Schwachstelle in AMD Prozessor, Dell PowerEdge und HPE ProLiant ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in AMD Prozessor, Dell PowerEdge und HPE ProLiant ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1807