9748 matches found
PT-2025-18407
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been resolved, specifically in the arm/crc-t10dif component, where an array was used outside of its scope in the crc t10dif arch function. This issue has be...
kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the dosveacc function in the arch/arm64/kernel/fpsimd.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the nvidiasmmucontextfault function in the drivers/iommu/arm/arm-smmu/arm-smmu-nvidia.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux bpf_int_jit_compile Heap Buffer Overflow DoS
The vulnerability of the bpfintjitcompile function in the arch/arm/net/bpfjit32.c module of the Linux operating system’s kernel is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
OESA-2025-1282 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850evmconfigemac when booting multiv5defconfig in QEMU...
Improper Authentication
Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsync...
Improper Authentication
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsyn...
kernel: arm64/sve: Discard stale CPU state when handling SVE traps
A flaw was found in the Linux kernel. A race condition in the 64-bit ARM arm64 architecture's handling of Scalable Vector Extension SVE traps can allow stale processor register states to be reused. A local user can trigger this flaw through specific task preemption timing to access sensitive data...
PT-2025-16718
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential issue in the Linux kernel has been resolved, related to the vchiq arm module. The problem occurs when the vchiq platform conn state changed function is never called or fails...
arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
...
iommu/arm-smmu: Defer probe of clients after smmu device bound
...
Linux Distros Unpatched Vulnerability : CVE-2024-56568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference occurs due to a race between smmu driver probe and client driver probe,...
Linux Distros Unpatched Vulnerability : CVE-2024-36906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash: 33.452494...
Linux Distros Unpatched Vulnerability : CVE-2023-46837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes...
Linux Distros Unpatched Vulnerability : CVE-2021-47631
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850evmconfigemac when booting multiv5defconfig in QEMU...
Linux Distros Unpatched Vulnerability : CVE-2022-23960
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared...
Linux Distros Unpatched Vulnerability : CVE-2023-52481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On an affected Cortex-A520...
Linux Distros Unpatched Vulnerability : CVE-2024-47716
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros Floating point instructions in...
