sonos

sonos/amlogic haxx 在这里你会找到一些漏洞利用与工具代码，它们是我在 2023 年阿姆斯特丹 Hack in the Box 上 关于 Sonos One 的演讲的一部分。 EL3 漏洞利用可用于转储你的 OTP/eFUSE 数据。 sonostool 可用于获取 Sonos LUKS 卷的解密密钥，以及 获取并解密 OTA 更新，而无需将 Sonos 设备用作预言机。 截至撰写本文时，EL3 漏洞利用/缺陷仍是 0day。（从未向厂商报告） 尽情享用吧！ -- blasty [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-93249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to...

CVE-2026-93249

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

UBUNTU-CVE-2026-93249

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

EUVD-2026-86261

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

CVE-2026-93249 spi: amlogic-spisg: Make sure clk_init_data is fully initialized

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

CVE-2026-93249

A vulnerability exists in the Linux kernel involving the amlogic-spisg driver. The root cause is the failure to fully initialize all members of the clk_init_data structure within the aml_spisg_clk_init() function. While the function populates init.parent_data , it leaves init.parent_names uniniti...

CVE-2026-93249 spi: amlogic-spisg: Make sure clk_init_data is fully initialized

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

CVE-2026-93249: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

CVE-2026-93249

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initializ...

SUSE CVE-2026-89947

In the Linux kernel, the following vulnerability has been resolved: clk: meson: align gxbb32kclksel number of parents with actual count The following out-of-bounds read has been observed by Christian on a GXBB WeTek Hub: ================================================================== BUG: KASA...

The vulnerability of the aml_sfc_dma_buffer_setup() function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the aml_sfc_probe() function in the drivers/spi/spi-amlogic-spifc-a4.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

SUSE CVE-2026-68230

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

Linux Distros Unpatched Vulnerability : CVE-2026-68230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following...

CVE-2026-68230

A flaw was found in the Linux kernel's media: amlogic-c3 driver. This vulnerability arises from improper validation of automatic white balance AWB and automatic exposure AE configuration parameters. Specifically, the driver does not correctly check the number of zones against the allocated memory...

CVE-2026-68230

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-68230

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-68230

CVE-2026-68230 affects the Linux kernel media: amlogic-c3 driver. The vulnerability stems from improper validation of AWB/AE configuration, failing to ensure zones_num does not exceed allocated memory for zone weights, leading to potential invalid memory access and buffer overflow. Multiple sourc...

CVE-2026-68230 media: amlogic-c3: Add validations for ae and awb config

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...