PT-2021-8201 · Amd +1 · Amd Epyc Agesa Pi +1

Name of the Vulnerable Software and Affected Versions: AMD EPYC AGESA PI affected versions not specified Description: The issue is related to a side effect of an integrated chipset option that can be exploited by an attacker to bypass SPI ROM protections, allowing unauthorized modification of the...

UVI-2021-1001870 spi: Fix deadlock when adding SPI controllers on SPI buses

spi: Fix deadlock when adding SPI controllers on SPI buses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1001870 spi: Fix deadlock when adding SPI controllers on SPI buses

spi: Fix deadlock when adding SPI controllers on SPI buses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

PT-2021-26340

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: A potential issue exists in the Linux Kernel related to a deadlock when adding SPI controllers on SPI buses. The actual impact and attack plausibility have not yet been proven...

PT-2021-30335

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description A potential issue exists in the Linux Kernel related to a deadlock when adding SPI controllers on SPI buses. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2024-11463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock that occurs when adding SPI controllers on SPI buses. This happens because of a global lock, spi add lock, which is taken when adding new devices to...

Code injection

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...

CVE-2021-3453

CVE-2021-3453 affects Lenovo Notebook, ThinkPad, and Lenovo Desktop BIOS modules that are not protected by Intel Boot Guard, allowing a physically proximate attacker to write to the SPI flash storage. The issue stems from BIOS modules being unprotected by Boot Guard, enabling potential unauthoriz...

CVE-2021-3453

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...

PT-2021-20534

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook, ThinkPad, and Lenovo Desktop systems affected versions not specified Description: The issue affects certain Lenovo systems, including Notebooks, ThinkPads, and Desktops, where BIOS modules are not protected by Intel Boot Guar...

多款 Lenovo 设备 安全漏洞

Lenovo Desktops and Lenovo ThinkPad are both products of the Chinese company Lenovo.Lenovo Desktops are desktop computersLenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPa...

UVI-2021-1001017 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001017 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1000944 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000891 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

PT-2021-25488

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v5.12.10 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. This problem was introduced in version v5.4 and is fixed in Linux Kernel version...

PT-2021-29356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25362

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the bcm2835 spi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-29482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.12.10 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. This problem was introduced in version v5.4 and is fixed in Linux Kernel version v5.12.11...