Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: bcm2835spihandleerr: Fixed the issue of NULL pointer dereferencing for non-DMA transfers. If an IRQ-based transfer times out, the bcm2835spihandleerr function is called. Since commit 1513ceee70f2 “spi: bcm2835: Drop...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU on which the QSPI interrupt handler runs typically CPU 0 is excessively busy, it can lead to rare cases where the IRQ thread does not run before the transfer timeout is reache...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: spi: Fixed a use-after-free issue with devmspialloc We cannot rely on the contents of the devres list during spiunregistercontroller, as the list is already cleared when we call devresfind for devmspireleasecontroller. This cause...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SPI: sun6i – Fixing the race condition between DMA RX transfer completion and RX FIFO drain. Previously, the transfer-completion interrupt would immediately drain the RX FIFO to read any remaining data in the FIFO into the RX...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: encx24j600: check error in devmregmapinitencx24j600 devmregmapinit may return error which caused by like out of memory, this will results in null pointer dereference later when reading or writing register: general protection...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: spi: sun6i – reduced the DMA RX transfer width to a single byte. Through empirical testing, it has been determined that sometimes RX SPI transfers with DMA enabled may return corrupted data. This issue arises due to the loss of o...

CVE-2026-42806

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI C-driver in version v1.0.3 and prior, specifically within the field data parsing logic in readallfielddata bme69x.c. The driver prefetches heater configuration registers into a contiguous 30-byte stack buffer setval...

CVE-2026-42806: Out-of-bounds Read

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI C-driver in version v1.0.3 and prior, specifically within the field data parsing logic in readallfielddata bme69x.c. The driver prefetches heater configuration registers into a contiguous 30-byte stack buffer setval...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the spiqupinitdma function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver lies in the pointer that is dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SPI Device Driver Use-After-Free

The vulnerability of the ep93xxspisetupdma function in the drivers/spi/spi-ep93xx.c file of the Linux operating system’s SPI device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the sprdspiprobe function in the drivers/spi/spi-sprd.c file of the Linux kernel’s SPI device driver relates to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a system failure...

UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot

Overview The UEFI Shell program may expose raw memory access capabilities that, if present in platform firmware for debugging or advanced support use cases, could be abused to undermine UEFI Secure Boot protections. When the UEFI Shell is included in SPI flash, an attacker with the ability to...

Linux SPI Device Driver Use-After-Free

The vulnerability of the mpc52xxspiprobe function in the drivers/spi/spi-mpc52xx.c driver for Linux’s SPI devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073355 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DM...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053294 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spitransfer can be...

Input: psxpad-spi - set driver data before use

...

Linux SPI Driver Heap Buffer Overflow DoS

The vulnerability of the pchspipdremove function in the drivers/spi/spi-topcliff-pch.c driver for Linux SPI devices relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

Linux SPI Buffer Overflow DoS

The vulnerability of the s3c64xxspiremove function in the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI device driver is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-91787

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA I2C and SPI queue RCA firmware loading from component bind with request firmware nowait. The firmware loader keeps the callback module pinned and holds a devi...

Linux Distros Unpatched Vulnerability : CVE-2026-80752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend...