1831 matches found
kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service
A flaw was found in the Linux kernel's net/mlx5 component. A local user could exploit a use-after-free vulnerability during the shutdown process when embedded chip virtual function ECVF vports are unloaded. This occurs because the vport access control list ACL ingress table is not properly...
kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service
A flaw was found in the Linux kernel's net/mlx5 component. A local user could exploit a use-after-free vulnerability during the shutdown process when embedded chip virtual function ECVF vports are unloaded. This occurs because the vport access control list ACL ingress table is not properly...
Linux sound module Heap Buffer Overflow DoS
The vulnerability of the mt6797mt6351devprobe function in the sound module/soc/mediatek/mt6797/mt6797-mt6351.c file, which is related to Linux operating system SoC sound support, is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause ...
graph_util_parse_dai() function in the Data Compromise
The vulnerability of the graphutilparsedai function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s sound support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Linux SPI Device Driver Heap Buffer Overflow DoS
The vulnerability of the ch341transferone function in the drivers/spi/spi-ch341.c module of the Linux operating system’s SPI device driver relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
sound/soc/mediatek/common/mtk-soundcard-driver parse_dai_link_info
The vulnerability of the parsedailinkinfo function in the sound/soc/mediatek/common/mtk-soundcard-driver.c file relates to the sound support for Linux operating system kernels. It involves errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service...
CVE-2026-26070
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to std::map concurrent access container/optional corruption possible. The trigger is an EV SoC update with powermeter periodic update and unplugging/SessionFinished state. Version 2026.2.0 contains a...
nfc: pn533: properly drop the usb interface reference on disconnect
...
Linux kernel regmap_add_irq_chip_fwnode() function Heap Buffer Overflow DoS
The vulnerability of the regmapaddirqchipfwnode function in the drivers/base/regmap/regmap-irq.c file of the Linux kernel’s interrupt device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
sound/soc/generic/audio-graph-card.c Heap Buffer Overflow DoS
The vulnerability of the graphforeachlink function in the sound/soc/generic/audio-graph-card.c module related to Linux’s audio SoC kernel is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to trigger a service failure...
SUSE CVE-2026-23308
In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbrirqmask' and 'eqbrirqack' are also called in the callback function 'eqbrirqmaskack'. This is done to avoid source code duplication. The problem, is that ...
Linux SoC Audio Buffer Overflow DoS
The vulnerabilities of the functions wcd938xtxmodeget and wcd938xrxhphmodeget in the sound module/soc/codecs/wcd938x.c are related to buffer overflow attacks. Exploiting these vulnerabilities can allow attackers to gain access to protected information or cause system failures...
snd_soc_new_compress() Heap Buffer Overflow DoS
The vulnerability of the sndsocnewcompress function in the sound/soc/soc-compress.c module, which is part of the Linux SoC audio support, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
sound/soc/codecs/lpass-rx-macro.c Heap Buffer Overflow DoS
The vulnerability of the rxmacroloadcompandercoeff function in the sound/soc/codecs/lpass-rx-macro.c module of the Linux operating system’s sound support module is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to access protect...
Furnace 安全漏洞
Furnace is a chip tuning tracker developed by tildearrow. Versions of Furnace prior to 0.7 contained a security vulnerability, which was caused by out-of-bound reading, potentially causing issues with the program file flac.C...
CVE-2026-0849 crypto: ATAES132A response length allows stack buffer overflow
Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution...
ATLAS: AI-Assisted Threat-To-Assertion Learning for System-On-Chip Security Verification
This work presents ATLAS, an LLM-driven framework that bridges standardized threat modeling and property-based formal verification for System-on-Chip SoC security. Starting from vulnerability knowledge bases such as Common Weakness Enumeration CWE, ATLAS identifies SoC-specific assets, maps...
sound/soc/intel/boards/sof_sdw.c Heap Buffer Overflow DoS
The vulnerability of the mcprobe function in the sound/soc/intel/boards/sofsdw.c file, which is part of the Linux operating system’s audio support for SoC cores, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
