PT-2024-18772 · Unknown · Sveservice

Name of the Vulnerable Software and Affected Versions: SveService versions prior to SMR May-2024 Release 1 Description: The issue is related to a use after free vulnerability that allows local privileged attackers to cause memory corruption. Recommendations: For versions prior to SMR May-2024...

kernel: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode

In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate register which can vary between 16 and 256 bits in size depending upon the configured vector length. When saving the SVE state in...

PT-2025-43114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the Scalable Vector Extension SVE mode and the Floating-point Feature Register FFR. Specifically, when saving the SVE state in streaming SVE...

CVE-2024-26618

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit smealloc early with existing storage When smealloc is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fi...

CVE-2024-26618

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit smealloc early with existing storage When smealloc is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fi...

CVE-2024-26618 arm64/sme: Always exit sme_alloc() early with existing storage

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit smealloc early with existing storage When smealloc is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fi...

CVE-2024-26618 arm64/sme: Always exit sme_alloc() early with existing storage

In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit smealloc early with existing storage When smealloc is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fi...

PT-2025-37548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of Scalable Vector Extension SVE state allocation when changing the SME vector length. The issue arises from reallocating the SV...

GSD-2022-1005020 arm64/sme: Don't flush SVE register state when allocating SME storage

arm64/sme: Don't flush SVE register state when allocating SME storage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1005016 arm64/sme: Don't flush SVE register state when handling SME traps

arm64/sme: Don't flush SVE register state when handling SME traps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

PT-2022-33278 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.5 Description: The issue is related to the arm64/sme in the Linux Kernel, where SVE register state is not flushed when allocating SME storage. The actual impact and attack plausibility have not yet be...

PT-2022-33274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.19 through v5.19.5 Description The issue concerns the handling of SME traps in the Linux Kernel, specifically related to SVE register state flushing. The actual impact and attack plausibility have not yet been proven...

Exploit for Improper Access Control in Samsung Livewallpaperservice

Improper access control vulnerability in LiveWallpaperService...

CVE-2021-22494

An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q10.0 software. When a screen protector is used, the required image compensation is not present. Consequently, inversion can occur during fingerprint enrollment, and a high False Recognition Rate FRR can occu...

CVE-2021-22495

An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 Exynos chipsets software. The Mali GPU driver allows out-of-bounds access and a device reset. The Samsung ID is SVE-2020-19174 January 2021...

CVE-2021-22492

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Broadcom Bluetooth chipsets software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 January 2021...

Code injection

An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q10.0 software. When a screen protector is used, the required image compensation is not present. Consequently, inversion can occur during fingerprint enrollment, and a high False Recognition Rate FRR can occu...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 Exynos chipsets software. The Mali GPU driver allows out-of-bounds access and a device reset. The Samsung ID is SVE-2020-19174 January 2021...

CVE-2021-22492

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Broadcom Bluetooth chipsets software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 January 2021...

CVE-2021-22492

CVE-2021-22492 concerns a buffer overflow in the Bluetooth UART driver on Samsung mobile devices using Broadcom Bluetooth chipsets (O(8.x), P(9.0), Q(10.0)). The issue stems from the UART driver handling data unsafely, leading to potential memory corruption. CVSS data from NVD indicates a base sc...