2583 matches found
TPMGenie
TPM Genie TPM Genie is designed to aid in vulnerability research of Trusted Platform Modules. As a serial bus interposer, TPM Genie is capable of intercepting and modifying all traffic that is sent across the I2C channel between the host machine and a discrete TPM chip. Outside of research, the...
CVE-2026-89888
A flaw was found in the Linux kernel's media: i2c: ov02a10 driver. This vulnerability occurs because the ov02a10checkhwcfg function attempts to use a freed memory region during endpoint parsing. A local attacker could potentially exploit this use-after-free condition, which may lead to a denial o...
CVE-2026-89887
A flaw was found in the Linux kernel's media: i2c: ov7740 driver. An incorrect teardown order in the ov7740remove function can lead to a use-after-destroy condition, where a mutex is destroyed before a dependent V4L2 control handler is freed. This can also result in a double-free. A local attacke...
CVE-2026-25278
A flaw was found in Snapdragon. A race condition exists when processing I2C Inter-Integrated Circuit transfer requests, specifically between memory allocation and data copying. This timing vulnerability can lead to memory corruption, allowing a local attacker with low privileges to potentially...
SparkAltBatteryBoard
SparkAltBatteryBoard A custom research-oriented battery interface and telemetry board for the DJI Spark platform, built around a standard 3S LiPo battery pack instead of the discontinued, hard-to-find OEM Smart Battery. This project documents a reverse-engineered I2C/SMBus smart-battery...
UBUNTU-CVE-2026-99248
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pmruntimeenable/disable with devmpmruntimesetactiveenabled and dropped the remove-time runtime PM teardown. The managed release...
CVE-2026-99248 i2c: xiic: restore non-managed runtime PM to fix clk WARN flood
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pmruntimeenable/disable with devmpmruntimesetactiveenabled and dropped the remove-time runtime PM teardown. The managed release...
EUVD-2026-115778
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pmruntimeenable/disable with devmpmruntimesetactiveenabled and dropped the remove-time runtime PM teardown. The managed release...
CVE-2026-99248
The Linux kernel contains a vulnerability in the i2c: xiic driver where a devres conversion caused a clk WARN flood during teardown. The managed runtime PM helper executed teardowns in the incorrect order, leading to clk_core_disable() being called on already-disabled clocks. The fix involves dro...
USN-8960-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...
Linux Distros Unpatched Vulnerability : CVE-2026-99248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pmruntimeenable/disable with devmpmruntimesetactiveenabled...
PT-2026-136084
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pm runtime enable/disable with devm pm runtime set active enabled and dropped the remove-time runtime PM teardown. The managed...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures ‘autoupdateinterval’ to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2cmuxaddadapter takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure e.g., probe deferral and on driver unbind as well; if a device tree redundantly uses the ‘ddc-i2c-bus’ property to...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter’s debugfs directory before it unregisters the adapter device; however, the newdevice sysfs attribute remains writable until devicedel is called. A race...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse still, it returns without a NACK+STOP: the next receive cycle...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov7740: fix use-after-destroy in remove The ov7740remove function contained a serious teardown order bug; it destroyed the driver’s mutex before freeing the V4L2 control handler that relies on that mutex, resulting in...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Input: goodix – clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock This fix resolves a severe AB/BA deadlock occurring between the Common Clock Framework CCF and the I2C adapter lock. This deadlock occurs when an...