CVE-2021-3453

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...

PT-2021-20534

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook, ThinkPad, and Lenovo Desktop systems affected versions not specified Description: The issue affects certain Lenovo systems, including Notebooks, ThinkPads, and Desktops, where BIOS modules are not protected by Intel Boot Guar...

Multiple Lenovo Devices Have Security Vulnerabilities

Lenovo Desktops and Lenovo ThinkPad are both products of the Chinese company Lenovo.Lenovo Desktops are desktop computersLenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPa...

UVI-2021-1001017 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001017 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1000944 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000891 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

PT-2021-29356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25362

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the bcm2835 spi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-25415

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-29482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.12.10 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. This problem was introduced in version v5.4 and is fixed in Linux Kernel version v5.12.11...

PT-2021-25488

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v5.12.10 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. This problem was introduced in version v5.4 and is fixed in Linux Kernel version...

Zephyr buffer overflow vulnerability (CNVD-2021-44932)

Zephyr is an open source, small, scalable real-time operating system. A security vulnerability exists in Zephyr versions ＞= v1.14.2 and ＞= v2.2.0, which stems from a lack of size checking in Bluetooth HCI on SPI. No details of the vulnerability are available at this time...

UVI-2021-1000630 spi: spi-fsl-dspi: Fix a resource leak in an error handling path

spi: spi-fsl-dspi: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

GSD-2021-1000630 spi: spi-fsl-dspi: Fix a resource leak in an error handling path

spi: spi-fsl-dspi: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

GSD-2021-1000596 spi: spi-fsl-dspi: Fix a resource leak in an error handling path

spi: spi-fsl-dspi: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000552 spi: spi-fsl-dspi: Fix a resource leak in an error handling path

spi: spi-fsl-dspi: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2021-29095

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.10 through 5.4.123 Description A resource leak was found in an error handling path in the spi-fsl-dspi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-29017

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.10 through 5.12.8 Description A resource leak was found in an error handling path in the spi-fsl-dspi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...