SUSE CVE-2018-20815

In QEMU 3.1.0, loaddevicetree in devicetree.c calls the deprecated loadimage function, which has a buffer overflow risk...

SUSE CVE-2019-8934

hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest...

PT-2023-34960 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to the arm64 device tree for imx8mm-verdin, where the eth-phy is not properly powered down. This problem was introduced in version v5.18 and is fixed in version v6.1.11...

GSD-2023-1001282 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000920 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000462 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

PT-2025-49747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s overlay functionality where a call to of changeset init occurs prematurely. Specifically, if of overlay fdt apply fails, a partial state may remain,...

PT-2022-35741 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A potential security issue exists due to a sanity check on the DT child nodes number in libahci platform. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-34984 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue concerns a sanity check for the number of DT child nodes in the libahci platform module. The actual impact and potential for attack have not been proven yet. Recommendations: For Lin...

PT-2022-35264 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential issue exists in the libahci platform module, related to a sanity check of the DT child nodes number. The actual impact and attack plausibility have not yet been proven...

PT-2022-35474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential issue exists in the libahci platform module, related to a sanity check of the DT child nodes number. The actual impact and attack plausibility have not yet been proven...

PT-2025-38435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ath11k module’s Mobile Host Interface MHI functionality. Specifically, a memory leak can occur in the ath11k mhi register function. This happe...

GSD-2022-1000425 arm64: dts: meson-sm1-odroid: use correct enable-gpio pin for tf-io regulator

arm64: dts: meson-sm1-odroid: use correct enable-gpio pin for tf-io regulator This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

SUSE: Security Advisory (SUSE-SU-2019:1269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-11125 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0 Description: The issue is related to the iommu/mediatek component in the Linux kernel. In the mtk iommu runtime resume function, the clock is not always enabled, which can cause a warning when the 'suspen...

PT-2024-11184 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue occurs when no valid fdt is found, causing initial boot params to be null. This happens when setup arch invokes efi init and then efi get fdt params. To prevent further fdt...

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the applybinaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an...

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the applybinaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an...

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the applybinaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an...

NVIDIA Jetson AGX Xavier Series Security Vulnerability

A security vulnerability exists in the NVIDIA Jetson AGX Xavier Series, which stems from an improperly applied access control that could allow an unprivileged user to modify a system device tree file, resulting in a denial of service...