618 matches found
PT-2026-37452
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device leak occurs in the mtk-smi component during the larb probe process. The issue arises when the reference taken while looking up the SMI device is not properly dropped during late...
SUSE CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-60695
A stack-based buffer overflow vulnerability exists in the mtkdut binary of Linksys E7350 routers Firmware 1.1.00.032. The function sub4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary...
CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-60695
A stack-based buffer overflow vulnerability exists in the mtkdut binary of Linksys E7350 routers Firmware 1.1.00.032. The function sub4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary...
PT-2025-46869
Name of the Vulnerable Software and Affected Versions Linksys E7350 Router versions 1.1.00.032 Description A stack-based buffer overflow exists in the mtk dut binary. The sub 4045A8 function reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and copies it into a...
Linksys E7350 安全漏洞
Linksys E7350 is a dual-band WiFi 6 router with AX1800 speeds from Linksys USA. A security vulnerability exists in the Linksys E7350 version 1.1.00.032, which originates from a stack buffer overflow in the mtkdut binary file, which could result in memory corruption, denial of service, or executio...
CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
UBUNTU-CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-40156
Technical details for CVE-2025-40156 are not provided in the connected documents; the Ubuntu/Nessus entries reference other CVEs and do not disclose specifics of this CVE.
Linux Distros Unpatched Vulnerability : CVE-2025-40156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error...
CVE-2025-40156: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989495)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989495 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: out of bounds read in mtkhwlrogetfdirentry The fsp-location variable...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988706)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988706 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit Use clkdisableunprepare in the error pat...
Vulnerability of the mtkPhyInit() function in the drivers/phy/mediatek/phy-mtk-tphy.c module – This driver provides support for Linux kernel PHY devices, which allows attackers to compromise the confidentiality and accessibility of protected information.
Vulnerability of the mtkPhyInit function in the drivers/phy/mediatek/phy-mtk-tphy.c module – The Linux kernel’s PHY driver has a vulnerability related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to compromise th...
The vulnerability of the msdc_prepare_data() function in the mtk-sd component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the msdcpreparedata function in the mtk-sd component of the Linux operating system’s kernel is related to memory errors after memory is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-37610
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the Linux kernel within the mtk-mdp media component. The vpu get plat device function, called during mtk mdp probe, increases the reference count of the return...
EUVD-2020-6052
Malware in sbrugna...