PT-2021-30087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description The issue is related to a resource leak in the reconfiguration device addition in the i2c: acpi component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29987

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.251 Description The issue is related to a resource leak in the reconfiguration device addition in the i2c: acpi component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-30013

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue is related to a resource leak in the reconfiguration device addition in the i2c: acpi component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2024-11421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak in the Linux kernel has been resolved. The issue occurs when acpi i2c find adapter by handle calls bus find device, which takes a reference on the adapter that is never...

ruspiro-boot (>=0.3.0, <=0.3.2), ruspiro-console (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2020-36435 via ruspiro-singleton (>=0.0.2, <=0.3.1)

ruspiro-singleton CARGO version =0.0.2, =0.3.0, =0.0.2, =0.0.2, =0.3.0, =0.1.0, =0.0.2, =0.4.0, =0.0.2, =0.3.1 Source cves: CVE-2020-36435 Source advisory: GHSA-FQQ2-XP7M-XVM8...

Breaking the NFC chips in tens of millions of smart phones, and a few PoS systems

This second post is a companion to the DEF CON 29 video. Starts at 25:43 here. About a year ago I did some research into adding new capabilities to Samsung’s NFC chips in their smartphones, by bypassing their signature protection and applying code patches. This allowed me to add custom NFC tag...

GSD-2021-1001146 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13 by commit...

UVI-2021-1001137 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.14 by commit...

GSD-2021-1001137 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.14 by commit...

GSD-2021-1001129 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...

UVI-2021-1001129 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...

GSD-2021-1001121 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.129 by commit...

GSD-2021-1001114 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.196 by commit...

UVI-2021-1001114 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.196 by commit...

GSD-2021-1001108 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.238 by commit...

UVI-2021-1001102 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.274 by commit...

GSD-2021-1001102 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.274 by commit...

UVI-2021-1001096 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.274 by commit...

PT-2021-25617

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 5.12 Description: The issue is related to the i2c component in the Linux Kernel, specifically concerning control-request directions. It was introduced in version v3.14 and fixed in version v5.13. The actual...

PT-2021-25567

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 4.4.273 Description: The issue is related to the i2c component in the Linux Kernel, specifically concerning control-request directions. It was introduced in version v3.14 and fixed in version v4.4.274. The...