69 matches found
ps5-uart
24 pin header near salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw:...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fixed a reference leak when pmruntimegetsync fails. The PM reference count is not expected to be incremented upon a return in lpi2cimxmasterenable. However, pmruntimegetsync will still increment the PM reference...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare the clock during runtime suspend/resume If there is any clock controller attached to this I2C bus controller, such as Versaclock or an AIC32x4 I2C codec, then an I2C transfer triggered by th...
CVE-2026-74547
A flaw was found in the Linux kernel's hwmon adt7470 component. A local user can exploit this by configuring the 'autoupdateinterval' to zero via sysfs while 'numtempsensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources an...
UBUNTU-CVE-2026-74547
In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...
CVE-2026-74547
In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...
CVE-2026-74547 hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...
CVE-2026-74547
The CVE-2026-74547 entry concerns the Linux kernel hwmon driver for adt7470. When auto_update_interval is set to 0, the background update thread can schedule a zero-delay wakeup and, if num_temp_sensors is 0, msleep_interruptible() also becomes 0, causing a tight, unbounded busy-loop that hogs CP...
UBUNTU-CVE-2026-72141
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...
CVE-2026-64274
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
CVE-2026-64270 Input: mms114 - reject an oversized device packet size
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...
EUVD-2026-46011
In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check only clamps it to avoid overrunning the chip-words256 register array,...
CVE-2026-64135
In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...
PT-2026-61105
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the registration of I2C adapters. The i2c get adapter function allows looking up adapters by ID and takes a reference to the embedded struct device. If an...
Astra Linux – Vulnerability in Linux 5.15
A buffer overflow vulnerability was discovered in the Linux kernel’s Intel iSMT SMBus host controller driver, particularly in its handling of the I2CSMBUSBLOCKPROCCALL case using the ioctl I2CSMBUS function. This flaw could allow a local user to cause the system to crash...
PT-2026-43868
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description Two issues exist in the pt5161l read block data function within the hwmon component. First, a buffer overrun occurs because...
CVE-2026-31549
In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device serial string as the i2c adapter name but does not make sure that the string exists. Verify that the device has a serial number before...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8200-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8200-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
UBUNTU-CVE-2026-23369
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: replace acpilock with I2C bus lock" This reverts commit f707d6b9e7c18f669adfdb443906d46cfbaaa0c1. Under rare circumstances, multiple udev threads can collect i801 device info on boot and walk...
CVE-2026-23369
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: replace acpilock with I2C bus lock" This reverts commit f707d6b9e7c18f669adfdb443906d46cfbaaa0c1. Under rare circumstances, multiple udev threads can collect i801 device info on boot and walk...