GSD-2022-1000585 spi: uniphier: fix reference count leak in uniphier_spi_probe()

spi: uniphier: fix reference count leak in uniphierspiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

PT-2022-28944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue is related to a reference count leak in the uniphier spi probe function. This leak was introduced in version v5.6 and is fixed in version v5.16.8. The actual impact and attack...

PT-2022-28859

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description A reference count leak was discovered in the uniphier spi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

GSD-2022-1000227 spi: uniphier: fix reference count leak in uniphier_spi_probe()

spi: uniphier: fix reference count leak in uniphierspiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

PT-2022-28505

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description A reference count leak was discovered in the uniphier spi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-7613 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix commit Description: The issue is related to a NULL pointer dereference in the zynq qspi exec mem op function. This occurs because kzalloc is directly used in memset, which could lead to a NULL pointer...

Chinese Hackers Spotted Using New UEFI Firmware Implant in Targeted Attacks

A previously undocumented firmware implant deployed to maintain stealthy persistence as part of a targeted espionage campaign has been linked to the Chinese-speaking Winnti advanced persistent threat group APT41. Kaspersky, which codenamed the rootkit MoonBounce, characterized the malware as the...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 for OpenShift image security and enhancement update

A new image is available for Red Hat Single Sign-On 7.5.1, running on OpenShift Container Platform 3.10 and 3.11, and 4.9. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

WS-2021-0485

In Linux/Kernel is vulnerable to use-after-free of the addlock mutex in drivers/spi/spi.c...

CVE-2020-12954

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

Design/Logic Flaw

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

Design/Logic Flaw

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2020-12961

CVE-2020-12961 affects AMD Platform Security Processor (PSP). The issue could allow an attacker to zero a privileged register on the System Management Network, potentially bypassing SPI ROM protections. Documented impact is high (CVSSv3.1: 7.8 Local, High impact) with local access and no user int...

CVE-2020-12954

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

CVE-2020-12954

CVE-2020-12954 relates to an AMD Platform Security Processor (ASP) boot loader header where improper input and range validation can allow attacker-controlled values before signature verification, potentially enabling arbitrary code execution and bypassing SPI ROM protections to modify SPI ROM. Th...

CVE-2020-12961: Improper Input Validation

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2020-12954: Protection Mechanism Failure

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

PT-2021-9515

Name of the Vulnerable Software and Affected Versions AMD Platform Security Processor PSP affected versions not specified Description A potential issue exists in the AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network,...