2639 matches found
CVE-2024-46769
CVE-2024-46769 relates to the Linux kernel SPI Intel driver. A check for the pointer returned by devm_kasprintf() in intel_spi_populate_chip() was missing, allowing a NULL pointer to be used for pdata->name. The vulnerability has been resolved in the kernel with the fix described in the linked...
CVE-2024-46769 spi: intel: Add check devm_kasprintf() returned value
In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devmkasprintf returned value intelspipopulatechip use devmkasprintf to set pdata-name. This can return a NULL pointer on failure but this returned value is not checked...
CVE-2024-46769
In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devmkasprintf returned value intelspipopulatechip use devmkasprintf to set pdata-name. This can return a NULL pointer on failure but this returned value is not checked...
EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2369)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel:ACPI: CPPC: Use accesswidth over bitwidth for system memory accessesCVE-2024-35995 kernel: block: fix overflow in...
PT-2024-7180
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc5-gc7b0e37c8434 Description The vulnerability is related to an out-of-bounds issue in the nxp fspi exec op function when writing data that is not 4 byte aligned to TX FIFO. This can be reproduced by...
CVE-2024-44815
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
CVE-2024-44815
The Hathway Skyworth Router CM5100 (version 4.1.1.24 ) is vulnerable to a security flaw where a physically proximate attacker can obtain user credentials by accessing the SPI flash Firmware W25Q64JV . The root cause is that login credentials for both the web portal and the Wi-Fi access point are ...
CVE-2024-44815
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
CVE-2024-44815
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
Skyworth Router CM5100 安全漏洞
The Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Hathway Skyworth Router CM5100 version 4.1.1.24, which originates from a vulnerability that allows a physically proximate attacker to obtain user credentials via SPI flas...
CVE-2024-44815: Insufficiently Protected Credentials
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
ROS-20240909-03
Vulnerability of the opteeregisterdevice function in the drivers/tee/optee/device.c module of the Trusted Execution Environment TEE module of the Linux kernel is related to incorrect processing of the return code. return code. Exploitation of the vulnerability could allow an attacker to cause a...
PT-2024-35511
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc6-next-20240902-00001-g131bf9439dd9 Description A vulnerability has been resolved in the Linux kernel. The issue is related to the flexspi compatible string in the arm64: dts: imx8ulp. The flexspi on...
PT-2024-32183 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the intel spi populate chip function using devm kasprintf to set pdata-name, which can return a NULL pointer on failure, but this returned value is not checked...
PT-2024-32244
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Rockchip SPI PM handling in the Linux kernel. A commit stopped respecting runtime PM status and simply disabled clocks unconditionally when suspending the...
CVE-2021-4441
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop In zynqqspiexecmemop, kzalloc is directly used in memset, which could lead to a NULL pointer dereference on failure of kzalloc. Fix this bug by adding a chec...
CVE-2021-4441
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop In zynqqspiexecmemop, kzalloc is directly used in memset, which could lead to a NULL pointer dereference on failure of kzalloc. Fix this bug by adding a chec...
CVE-2021-4441
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop In zynqqspiexecmemop, kzalloc is directly used in memset, which could lead to a NULL pointer dereference on failure of kzalloc. Fix this bug by adding a chec...
CVE-2021-4441
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop In zynqqspiexecmemop, kzalloc is directly used in memset, which could lead to a NULL pointer dereference on failure of kzalloc. Fix this bug by adding a chec...