com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.24), org.apache.tomee:apache-tomee (11.0.0-m1) +10 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.24)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =3.0.0, =3.0.0, =11.0.0, =11.1.3 Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302852...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.120), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.120)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.1.1 Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302852...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.120), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-73180 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.120)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.1.1 Source cves: CVE-2026-73180 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302875...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.24), org.apache.tomee:apache-tomee (11.0.0-m1) +10 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.24)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =3.0.0, =3.0.0, =11.0.0, =11.1.3 Source cves: CVE-2026-68525 Source advisory: OSV:GHSA-H3X4-894J-XPX5...

Linux SPI Amlogic Buffer Overflow

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

ROS-20260825-73-0030

The vulnerability of the bcmqspiprobe function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SPI Buffer Overflow DoS

The vulnerability of the spiregistercontroller function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the amlspisgprobe function in the drivers/spi/spi-amlogic-spisg.c module of the Linux device driver for SPI devices is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

meson_spiccremove() SPI Function

The vulnerability of the mesonspiccremove function in the drivers/spi/spi-meson-spicc.c driver for Linux’s SPI device drivers is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel SPI Heap Buffer Overflow DoS

The vulnerability of the stm32ospiprobe function in the drivers/spi/spi-stm32-ospi.c file of the Linux kernel’s SPI device driver is related to improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to cause a system failure...

Linux kernel MCP251x_open() DoS

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the dwspidmawait function in the drivers/spi/spi-dw-dma.c file of the Linux kernel’s SPI device driver is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: spi: imx: Reconfigure for PIO when DMA cannot be started When spiimxcandma selects DMA, the ECSPI is configured for DMA. spiimxsetupxfer sets CTRL.SMC and clears dynamicburst, and spiimxdmatransfer programs the dynamic-burst...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fpga: microchip-spi: fixed the issue where zero value of headersize was read during mpfopsParseHeader. In this function, headersize is read from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression...

Linux SPIWPCMFIU Component DoS

The vulnerability of the drivers/spi/spi-wpcm-fiu.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux mprls0025pa_spi.c DoS

The vulnerability of the mprls0025paspi.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74415

A flaw was found in the Linux kernel's atcspi200 Serial Peripheral Interface SPI driver. When the driver unbinds, the Direct Memory Access DMA resource can be prematurely deallocated while the SPI controller is still active and initiating DMA transfers. This timing issue can lead to a...

CVE-2026-74276

A flaw was found in the Linux kernel's spi: xilinx driver. The driver incorrectly determines the size of its internal buffer, a First-In, First-Out FIFO queue. This miscalculation can lead to an overflow when the driver attempts to write more data than the FIFO can hold during a Serial Peripheral...

CVE-2026-72152

A flaw was found in the Linux kernel's Trusted Platform Module TPM TIS SPI driver. The waiteventinterruptibletimeout function incorrectly evaluates its condition after setting the task state, which can trigger a warning when debugging atomic sleeps and using the Interrupt Request IRQ wait path...

CVE-2026-72155

A flaw was found in the Linux kernel's mtd: spi-nor: swp component. When a user attempts to unlock specific blocks on a Serial Peripheral Interface SPI NOR flash device, particularly those at the beginning of the device, the operation may fail. This occurs due to an incorrect calculation of the...