Lenovo-Qcom-RPMB-PoC

Lenovo Qcom RPMB Tool !CAUTION Prerequisites : Python 3.12 64-bit must be installed on your Windows system and added to PATH before running this tool. The bundled offline dependencies and Qualcomm EDL communication rely on Python 3.12. !IMPORTANT Device Compatibility Notice : This tool is strictl...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams ‘Commit a354f030dbce “ASoC: qcom: q6asm: handle the responses after closing”’ attempted to ignore DSP responses that arrived after a stream had been closed. However,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clearing of the opened substreams occurs when stream enable fails. When stream enable is activated, subs-opened is set before the serviceinterval is validated. An invalid interval causes the process to jump...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: rejecting a disable request when there is no active interface The handleuaudiostreamreq function resolves an interface index using infoidxfromifnum. This function returns -EINVAL if no interface matches the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: Fix leak when custom dumpsegments addition fails Free allocated minidumpregion ‘name’ in qcomaddminidumpsegments when failing before adding the region to ‘dumpsegments’. Otherwise, the ‘name’ is not tracked and ...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: fix PREEMPTRT self-deadlock in IRQ handler qcomcpucpmboxirqfn calls mboxchanreceiveddata while holding chan-lock. Under PREEMPTRT, spinlockirqsave is converted to an rtspinlock rtmutex-based, which tracks...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: unregister CAMCCGDSCCLK With the introduction of syncstate support in the clk and pmdomain subsystems, the following warning occurs when unused clocks are shut down in camcc-sc8280xp: 15.408367...

CVE-2026-90027

A flaw was found in the Linux kernel. Specifically, a race condition exists in the USB Type-C subsystem's qcom-pmic-typec driver. This can occur when a port is stopped, allowing a delayed work item to be queued and executed after its associated memory has been released. This use-after-free...

CVE-2026-89869

A flaw was found in the Linux kernel's qcom iris driver. When the Video Processing Unit VPU is powered off, the system fails to wait for active Interrupt Request IRQ handlers to complete. This allows an IRQ handler to access hardware registers after the VPU has been powered down, which can lead t...

CVE-2026-80835

A flaw was found in the Linux kernel's qcom-rng driver. This driver, responsible for generating random numbers, allowed two of its interfaces to operate simultaneously without proper synchronization. This oversight could lead to the generation of predictable or non-random values, potentially...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remote proc starts while the NGD driver is being probed, or when the remote proc is already up during PDR lookup registration, or in the theoretical...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...

K000164033: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46142 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register...

SUSE CVE-2026-98940

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

DEBIAN-CVE-2026-98940

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

CVE-2026-98940

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

UBUNTU-CVE-2026-98940

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

CVE-2026-98940

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

CVE-2026-98940 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

CVE-2026-98940

The Linux kernel contains a vulnerability in the ASoC: qcom: lpass-cpu driver where the system incorrectly uses a DAI ID (a hardware port ID) as an index for the variant->dai_driver table. Because DAI IDs may be sparse, this mismatch can cause the code to write beyond the table boundaries when...