Lucene search
K

332 matches found

UbuntuCve
UbuntuCve
added 2026/05/08 2:16 p.m.4 views

CVE-2026-43319

In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spilock and buflock The spidev driver previously used two mutexes, spilock and buflock, but acquired them in different orders depending on the code path: write/read: buflock - spilock ioctl...

5.5CVSS5.8AI score0.00014EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.6 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the serial CAIF component not properly holding the tty-link reference during operations like...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/07 6:30 p.m.5 views

EUVD-2025-209726

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​...

6.8CVSS5.8AI score0.00026EPSS
Exploits0References3
NVD
NVD
added 2026/05/07 4:16 p.m.9 views

CVE-2025-4386

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​...

6.8CVSS0.00026EPSS
Exploits0References2
CVE
CVE
added 2026/05/07 3:0 p.m.12 views

CVE-2025-4386

CVE-2025-4386 concerns the Medtronic MyCareLink Patient Monitor, which exposes an internal serial interface that can be accessed by an attacker with physical access to reach a UART login prompt. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 6.8 (MEDIUM). The att...

6.8CVSS5.8AI score0.00026EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/07 3:0 p.m.6 views

CVE-2025-4386 Medtronic MyCareLink Patient Monitor Hardware Debug Port

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​...

6.8CVSS5.8AI score0.00026EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/07 3:0 p.m.29 views

CVE-2025-4386 Medtronic MyCareLink Patient Monitor Hardware Debug Port

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​...

6.8CVSS0.00026EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/07 3:0 p.m.5 views

CVE-2025-4386

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​...

6.8CVSS5.8AI score0.00026EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/07 12:0 a.m.5 views

Medtronic MyCareLink Patient Monitor 安全漏洞

Medtronic MyCareLink Patient Monitor is an open-source monitoring system developed by Medtronic in the United States. The Medtronic MyCareLink Patient Monitor has a security vulnerability, which stems from its internal serial interface. This vulnerability could allow attackers with physical acces...

6.8CVSS5.8AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2026/05/01 2:15 p.m.7 views

CVE-2026-31783

The CVE-2026-31783 entry refers to a Linux kernel issue in spi: amlogic: spifc-a4 where the on-host NAND ECC engine teardown was missing in probe unwind and remove-time cleanup. The fix adds a devm cleanup action so nand_ecc_unregister_on_host_hw_engine() runs automatically on probe failures and ...

5.5CVSS5.8AI score0.00015EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/01 2:15 p.m.4 views

CVE-2026-31783

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove callback amlsfcprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup...

5.5CVSS5.7AI score0.00015EPSS
Exploits0
Debian CVE
Debian CVE
added 2026/04/24 2:35 p.m.1 views

CVE-2026-31562

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipidsihostregister The call to mipidsihostregister triggers a callback to mtkdsibind, which uses devgetdrvdata to retrieve the mtkdsi struct, so this structure needs to be...

5.5CVSS5.2AI score0.00015EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.6 views

PT-2026-34914

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipi dsi host register The call to mipi dsi host register triggers a callback to mtk dsi bind, which uses dev get drvdata to retrieve the mtk dsi struct, so this structure need...

5.2AI score0.00015EPSS
Exploits0References4
NVD
NVD
added 2026/04/22 2:16 p.m.1 views

CVE-2026-31489

In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path mesonspiccprobe registers the controller with devmspiregistercontroller, so teardown already drops the controller reference via devm cleanup. Calling spicontrollerput again in...

7.8CVSS0.00015EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010816 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure In case mipidsiattach fails,...

5.9AI score0.00062EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010894 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, t...

5.5CVSS5.8AI score0.00016EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/07 9:32 p.m.3 views

EUVD-2025-209284

The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts the provided encrypted firmware packag...

5.1CVSS5.8AI score0.00015EPSS
Exploits0References2
NVD
NVD
added 2026/04/07 8:16 p.m.0 views

CVE-2025-14858

The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts the provided encrypted firmware packag...

5.1CVSS0.00015EPSS
Exploits0References1
CVE
CVE
added 2026/04/07 7:57 p.m.7 views

CVE-2025-14858

The CVE targets Semtech LR11xx LoRa transceivers with early firmware versions. During a firmware validity check over SPI, the device decrypts an encrypted firmware package block-by-block; the last decrypted block remains uncleared in memory after validation, enabling an attacker with SPI access t...

5.1CVSS5.8AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/07 7:57 p.m.14 views

CVE-2025-14858 Semtech LR11xx Encrypted Firmware Disclosure

The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts the provided encrypted firmware packag...

5.1CVSS0.00015EPSS
Exploits0References1
Rows per page
Query Builder