CVE-2024-42279

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

UBUNTU-CVE-2024-42279

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

CVE-2024-42279

CVE-2024-42279 affects the Linux kernel SPI microchip-core driver. The root cause is that when rx_len == 0, the RX FIFO is not emptied in the interrupt handler, allowing a subsequent transfer to read leftover data from the previous transfer. The documented remediation is to use a register that em...

CVE-2024-42279 spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

CVE-2024-42279 spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

CVE-2024-42279 spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

CVE-2024-42279

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the microchip-core component to ensure that the TX and RX FIFOs are empty at the start of a...

CVE-2024-7490

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwipdhcpfindoption. This issue affect...

CVE-2024-7490

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwipdhcpfindoption. This issue affect...

CVE-2024-7490 Remote Code Execution in Advanced Software Framework DHCP server

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwipdhcpfindoption. This issue affect...

CVE-2024-7490

The CVE-2024-7490 issue is a stack-based overflow in Microchip Advanced Software Framework’s tinydhcpserver implementation (lwip_dhcp_find_option) caused by improper input validation. Affects ASF through version 3.52.0.2574; no fixes in the ASF stack are provided, and Microchip states the framewo...

CVE-2024-7490 Remote Code Execution in Advanced Software Framework DHCP server

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwipdhcpfindoption. This issue affect...

Microchip Advanced Software Framework 安全漏洞

Microchip Advanced Software Framework is a codebase for microprocessor embedded development from Microchip Corporation USA. The code base simplifies the use of microcontrollers by providing an abstraction of the hardware through drivers and high-value middleware. A security vulnerability exists i...

PT-2024-38380 · Microchip Technology · Microchip Advanced Software Framework

Name of the Vulnerable Software and Affected Versions: Microchip Advanced Software Framework versions through 3.52.0.2574 Description: The issue is related to an Improper Input Validation vulnerability in the Microchip Technology Advanced Software Framework example DHCP server, which can cause...

The vulnerability of the gp_aux_bus_probe() function in Microchip’s Linux-based PCI1XXXX driver allows a hacker to compromise the accessibility of protected information.

The vulnerability of the gpauxbusprobe function in the drivers/misc/mchpPCI1XXXX/ mchpPCI1XXXXgp.c file of the Microchip PCI1XXXX driver for the Linux operating system is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise t...

CVE-2024-36973

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...

DEBIAN-CVE-2024-36973

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...

CVE-2024-36973

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...

CVE-2024-36973

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...