Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a pointer reference issue in spi cadence-qspi, which could lead to memory corruption...

SUSE CVE-2021-47048

In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmpqspiexecop When handling op-addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store...

DEBIAN-CVE-2021-47048

In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmpqspiexecop When handling op-addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store...

PT-2025-41102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the bcm-qspi driver. If neither a "hif mspi" nor "mspi" resource is present, the driver exits probe prematurely but still indicates success. This...

GSD-2022-1003615 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commi...

GSD-2022-1003109 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-31372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

PT-2022-31664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could potential...

PT-2022-31020

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

PT-2022-31878

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

GSD-2022-1000887 spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()

spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000804 spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()

spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...