[Git][security-tracker-team/security-tracker][master] Update Intel CVEs related to INTEL-SA-01108
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Nov 16 10:25:14 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
77e391a1 by Salvatore Bonaccorso at 2024-11-16T11:24:26+01:00
Update Intel CVEs related to INTEL-SA-01108
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -747,7 +747,16 @@ CVE-2024-28051 (Out-of-bounds read in some Intel(R) VPL software before version
[bookworm] - onevpl-intel-gpu <ignored> (Minor issue)
NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html
CVE-2024-28049 (Improper input validation in firmware for some Intel(R) PROSet/Wireles ...)
- TODO: check
+ - firmware-nonfree 20240610-1
+ [bookworm] - firmware-nonfree <ignored> (Minor issue; upstream commits not fully confirmed by Intel)
+ NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=0c0898b4e0a4c1a46ae01fb42bf39f1cb0dab770
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=b3d445a98ebd6779d921a152349844c3e7b86bf8
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=02ad85a367efdac04e2a33d4f287b689906cb2cd
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2986e19030e01d9032a62f488e610a210d30ce0b
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=ded56705e80b1f5ad10650cd9196717ba71cbe17
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2f1461dd48dedd2f3704860e2c045625bbb43a3a
+ NOTE: In referenced commits firmware get updated fo release version at last 23.40.0.2.
CVE-2024-28030 (NULL pointer dereference in some Intel(R) VPL software before version ...)
- intel-mediasdk <removed>
[bookworm] - intel-mediasdk <ignored> (No specific details published, development stalled and scheduled for removal from Debian)
@@ -765,11 +774,29 @@ CVE-2024-25647 (Incorrect default permissions for some Intel(R) Binary Configura
CVE-2024-25565 (Insufficient control flow management in UEFI firmware for some Intel(R ...)
NOT-FOR-US: Intel
CVE-2024-25563 (Improper initialization in firmware for some Intel(R) PROSet/Wireless ...)
- TODO: check
+ - firmware-nonfree 20240610-1
+ [bookworm] - firmware-nonfree <ignored> (Minor issue; upstream commits not fully confirmed by Intel)
+ NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=0c0898b4e0a4c1a46ae01fb42bf39f1cb0dab770
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=b3d445a98ebd6779d921a152349844c3e7b86bf8
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=02ad85a367efdac04e2a33d4f287b689906cb2cd
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2986e19030e01d9032a62f488e610a210d30ce0b
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=ded56705e80b1f5ad10650cd9196717ba71cbe17
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2f1461dd48dedd2f3704860e2c045625bbb43a3a
+ NOTE: In referenced commits firmware get updated fo release version at last 23.40.0.2.
CVE-2024-24985 (Exposure of resource to wrong sphere in some Intel(R) processors with ...)
NOT-FOR-US: Intel
CVE-2024-24984 (Improper input validation for some Intel(R) Wireless Bluetooth(R) prod ...)
- TODO: check
+ - firmware-nonfree 20240610-1
+ [bookworm] - firmware-nonfree <ignored> (Minor issue; upstream commits not fully confirmed by Intel)
+ NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=0c0898b4e0a4c1a46ae01fb42bf39f1cb0dab770
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=b3d445a98ebd6779d921a152349844c3e7b86bf8
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=02ad85a367efdac04e2a33d4f287b689906cb2cd
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2986e19030e01d9032a62f488e610a210d30ce0b
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=ded56705e80b1f5ad10650cd9196717ba71cbe17
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2f1461dd48dedd2f3704860e2c045625bbb43a3a
+ NOTE: In referenced commits firmware get updated fo release version at last 23.40.0.2.
CVE-2024-23919 (Improper buffer restrictions in some Intel(R) Graphics software may al ...)
NOT-FOR-US: Intel
CVE-2024-23918 (Improper conditions check in some Intel(R) Xeon(R) processor memory co ...)
@@ -779,7 +806,16 @@ CVE-2024-23918 (Improper conditions check in some Intel(R) Xeon(R) processor mem
CVE-2024-23312 (Uncontrolled search path for some Intel(R) Binary Configuration Tool s ...)
NOT-FOR-US: Intel
CVE-2024-23198 (Improper input validation in firmware for some Intel(R) PROSet/Wireles ...)
- TODO: check
+ - firmware-nonfree 20240610-1
+ [bookworm] - firmware-nonfree <ignored> (Minor issue; upstream commits not fully confirmed by Intel)
+ NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=0c0898b4e0a4c1a46ae01fb42bf39f1cb0dab770
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=b3d445a98ebd6779d921a152349844c3e7b86bf8
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=02ad85a367efdac04e2a33d4f287b689906cb2cd
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2986e19030e01d9032a62f488e610a210d30ce0b
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=ded56705e80b1f5ad10650cd9196717ba71cbe17
+ NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2f1461dd48dedd2f3704860e2c045625bbb43a3a
+ NOTE: In referenced commits firmware get updated fo release version at last 23.40.0.2.
CVE-2024-22185 (Time-of-check Time-of-use Race Condition in some Intel(R) processors w ...)
NOT-FOR-US: Intel
CVE-2024-21853 (Improper finite state machines (FSMs) in the hardware logic in some 4t ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77e391a1376b22a32f990c07c198d605c8997ac0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77e391a1376b22a32f990c07c198d605c8997ac0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241116/56168b35/attachment.htm>
More information about the debian-security-tracker-commits
mailing list