Skip to content
Signals
NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-8037 · Progress LoadMaster Command Injection Vulnerability · Added 2026-08-07 · Due 2026-08-10CISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-8037 · Progress LoadMaster Command Injection Vulnerability · Added 2026-08-07 · Due 2026-08-10CISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08
Dragons Community

Vendors · lenova

lenova

· Vendor

Total CVEs

1

Critical

0

Products

28

Search All CVEs →

1

Products (28)

flex system x240 m41 CVEsflex system x240 m4 firmware1 CVEsflex system x240 m51 CVEsflex system x240 m5 firmware1 CVEsflex system x280 x61 CVEsflex system x280 x6 firmware1 CVEsflex system x440 m41 CVEsflex system x440 m4 firmware1 CVEsflex system x480 x61 CVEsflex system x480 x6 firmware1 CVEsflex system x8801 CVEsflex system x880 firmware1 CVEsnextscale nx360 m51 CVEsnextscale nx360 m5 firmware1 CVEssystem x3250 m61 CVEssystem x3250 m6 firmware1 CVEssystem x3500 m51 CVEssystem x3500 m5 firmware1 CVEssystem x3550 m51 CVEssystem x3550 m5 firmware1 CVEssystem x3650 m51 CVEssystem x3650 m5 firmware1 CVEssystem x3750 m41 CVEssystem x3750 m4 firmware1 CVEssystem x3850 x61 CVEssystem x3850 x6 firmware1 CVEssystem x3950 x61 CVEssystem x3950 x6 firmware1 CVEs

Recent Vulnerabilities

View all 1 →
CVE-2017-3768

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease.