GSD-2022-1000959 i2c: dev: check return value when calling dev_set_name()

i2c: dev: check return value when calling devsetname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2022-29915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to the i2c device, where the return value is not checked when calling the dev set name function. This could potentially lead to security vulnerabilities, although the...

PT-2025-8457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been identified, specifically in the cx23885 driver. The issue arises when the driver fails to call the dma set mask function, resulting in a use-after-free...

PT-2022-29232

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to the i2c device, where the return value is not checked when calling the dev set name function. This could potentially lead to security vulnerabilities, although the actu...

GSD-2022-1000438 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX

eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000343 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX

eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.180 by commit...

PT-2022-28653

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.94 through v5.10.100 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.3 through v5.16.9 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2022-28617

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.23 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2024-10520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ee1004 eeprom read function not properly limiting the number of bytes to read at once. Specifically, i2c smbus read i2c block data or emulated takes the lengt...

GSD-2022-1000051 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000042 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000034 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000026 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

PT-2022-28342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue concerns the validation of user data in compat ioctl for i2c. It was introduced in version v4.15 and fixed in Linux Kernel version v5.15.13. The actual impact and attack plausibilit...

PT-2022-28317

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description The issue concerns the validation of user data in the compat ioctl of the i2c component. It was introduced in version v4.15 and fixed in version v4.19.224. The actual impact and attack...

PT-2025-8442

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.5-00057-gaebcd29c8ed7-dirty Description A vulnerability in the Linux kernel has been resolved, which caused a kernel oops when removing the max9286 module. The issue occurred because the I2C client data did...

PT-2021-8081

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.19.223 Linux kernel versions prior to 5.4.169 Linux kernel versions prior to 5.10.89 Linux kernel versions prior to 5.15 Linux kernel versions prior to 5.15.12 Description The issue is related to the i2c transf...

GSD-2021-1002723 i2c: virtio: fix completion handling

i2c: virtio: fix completion handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit 9cbb957441ed8873577d7d313a3d79d69f1dad5c...