GSD-2021-1000280 spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op

spi: spi-zynqmp-gqspi: fix use-after-free in zynqmpqspiexecop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000385 spi: Fix use-after-free with devm_spi_alloc_*

spi: Fix use-after-free with devmspialloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000432 spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()

spi: fsl-lpspi: Fix PM reference leak in lpspipreparexferhardware This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

GSD-2021-1000378 spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails

spi: spi-zynqmp-gqspi: return -ENOMEM if dmamapsingle fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000431 spi: Fix use-after-free with devm_spi_alloc_*

spi: Fix use-after-free with devmspialloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

GSD-2021-1000385 spi: Fix use-after-free with devm_spi_alloc_*

spi: Fix use-after-free with devmspialloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000278 spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails

spi: spi-zynqmp-gqspi: return -ENOMEM if dmamapsingle fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

CVE-2020-10065

Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...

CVE-2020-13600

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...

CVE-2020-13600

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...

CVE-2020-10065

Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...

Heap overflow

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...

Input validation

Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...

CVE-2020-13600 Malformed SPI in response for eswifi can corrupt kernel memory

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...

CVE-2020-10065 Missing Size Checks in Bluetooth HCI over SPI

Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...

CVE-2020-10065

CVE-2020-10065 affects Zephyr’s Bluetooth HCI over SPI. The issue is missing size checks due to improper handling of the length parameter (CWE-130) in Zephyr versions >= v1.14.2 and >= v2.2.0. The advisories reference GHSA-hg2w-62p6-g67c; no patch/affected patch version is provided in the s...

PT-2021-8257 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a resource leak in an error handling path in the Linux kernel's spi-fsl-dspi component. The dspi request dma function should be undone by a dspi release dma cal...

PT-2024-11140 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been resolved in the Linux kernel, specifically in the spi-zynqmp-gqspi component. The issue occurs when handling op-addr, which uses the buffer "tmpbuf" aft...

PT-2024-11139 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the spi-zynqmp-gqspi controller in the Linux kernel, which supports 44-bit address space on AXI in DMA mode. If the dma map single function fails, it...

CVE-2021-27603

An RFC enabled function module SPIWAITMILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the...