244 matches found
PT-2026-8210
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tegra qspi combined seq xfer function related to the curr xfer field. Specifically, the curr xfer field can be accessed by an interrupt request...
SUSE CVE-2025-68746
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt handler runs on typically CPU 0 is excessively busy, it can lead to rare cases of the IRQ thread not running before the transfer timeout is reached...
EUVD-2025-205216
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt handler runs on typically CPU 0 is excessively busy, it can lead to rare cases of the IRQ thread not running before the transfer timeout is reached...
CVE-2025-68746
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt handler runs on typically CPU 0 is excessively busy, it can lead to rare cases of the IRQ thread not running before the transfer timeout is reached...
CVE-2025-68352
In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341transferone Discovered by Atuin - Automated Vulnerability Discovery Engine. The 'len' variable is calculated as 'min32, trans-len + 1', which includes the 1-byte command header...
The vulnerability of the spi_async() function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver allows a attacker to corrupt data.
The vulnerability of the spiasync function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected...
CVE-2023-53758
The CVE-2023-53758 issue concerns the Linux kernel driver for the Atmel QuadSPI (spi: atmel-quadspi). The vulnerability arises when an early error path in atmel_qspi_remove() unbinds the device without properly freeing resources, leaving the SPI controller with an unbound parent and unmapped regi...
The vulnerability of the spi component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the spi component in the Linux operating system’s kernel involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the spi_add_device() function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver allows a attacker to cause a service failure.
The vulnerability of the spiadddevice function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-2505
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fsl-cpm driver within the Linux kernel related to handling transfer sizes during SPI communication. A commit intended to optimize large transfers by switching to...
spi: cadence-quadspi: Implement refcount to handle unbind during busy
...
CVE-2025-21066
Samsung Notes contains an out-of-bounds read in the SPI decoder prior to version 4.4.30.63. The issue could let a local attacker access memory outside normal bounds. Affected software: Samsung Notes; impacted versions are before 4.4.30.63. Remediation: update to 4.4.30.63 or later (per PT-2025-41...
EUVD-2025-33667
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...
PT-2025-41526
Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the SPI decoder. This allows local attackers to access memory outside of the intended boundaries. Recommendations Update Samsung Notes to version...
EUVD-2025-31830
File upload leading to remote code execution RCE in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm' using the 'mcsdetailimg'...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986733)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986733 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call...
CVE-2023-53567 spi: qup: Don't skip cleanup in remove's error path
In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a...
EUVD-2025-25797
Malicious code in bioql PyPI...