3110 matches found
UVI-2021-1000385 spi: Fix use-after-free with devm_spi_alloc_*
spi: Fix use-after-free with devmspialloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
UVI-2021-1000457 spi: Fix use-after-free with devm_spi_alloc_*
spi: Fix use-after-free with devmspialloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...
UVI-2021-1000294 spi: stm32: Fix use-after-free on unbind
spi: stm32: Fix use-after-free on unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
UVI-2021-1000278 spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails
spi: spi-zynqmp-gqspi: return -ENOMEM if dmamapsingle fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
PT-2021-28743
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the spi-zynqmp-gqspi component in the Linux Kernel, where it fails to handle a specific error condition properly, potentially leading to memory-related issues. The actu...
PT-2021-24849
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: A potential issue exists where the spi-zynqmp-gqspi component of the Linux Kernel may return -ENOMEM if dma map single fails. The actual impact and attack plausibility have not yet been...
PT-2021-28843
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description A potential issue exists where the spi-zynqmp-gqspi component of the Linux Kernel may return -ENOMEM if dma map single fails. The actual impact and attack plausibility have not yet been prove...
PT-2021-28896
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.80 through 5.4.118 Description The issue is related to a use-after-free condition in the SPI allocation functions. It was introduced in version 5.4.80 and fixed in version 5.4.119. The actual impact and attack...
CVE-2020-10065
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
CVE-2020-13600
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
CVE-2020-10065
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
CVE-2020-13600
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
Heap overflow
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
Input validation
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
CVE-2020-13600
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
CVE-2020-13600 Malformed SPI in response for eswifi can corrupt kernel memory
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
CVE-2020-10065
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
CVE-2020-10065
CVE-2020-10065 affects Zephyr’s Bluetooth HCI over SPI. The issue is missing size checks due to improper handling of the length parameter (CWE-130) in Zephyr versions >= v1.14.2 and >= v2.2.0. The advisories reference GHSA-hg2w-62p6-g67c; no patch/affected patch version is provided in the s...
CVE-2020-10065 Missing Size Checks in Bluetooth HCI over SPI
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Length Parameter Inconsistency CWE-130. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c...
PT-2021-9660
Name of the Vulnerable Software and Affected Versions Zephyr versions 1.14.2 and later Zephyr versions 2.3.0 and later Description The issue is related to a malformed SPI in response for eswifi, which can corrupt kernel memory. It is described as a Heap-based Buffer Overflow. Recommendations For...