1499 matches found
USN-7521-3 linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...
Vulnerabilities in functions imx8mq_soc_revision_from_atf(), imx8mq_soc_revision(), imx8mm Soc UID(), kasprintf(), imx8_soc_init(), and kfree() of the drivers/soc/imx/soc-imx8m.c module of the Linux kernel, which allows an attacker to cause a system failure.
The vulnerabilities of the functions imx8mqsocrevisionfromatf, imx8mqsocrevision, imx8mm Soc UID, kasprintf, imx8socinit, and kfree in the soc/imx/soc-imx8m.c module of the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause syst...
BugWhisperer: Fine-Tuning LLMs for SoC Hardware Vulnerability Detection
The current landscape of system-on-chips SoCs security verification faces challenges due to manual, labor-intensive, and inflexible methodologies. These issues limit the scalability and effectiveness of security protocols, making bug detection at the Register-Transfer Level RTL difficult. This...
USN-7517-3 linux-bluefield vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...
USN-7516-6 linux-ibm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...
CVE-2024-44067
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...
USN-7516-5 linux-hwe-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...
CVE-2023-30763
Heap-based overflow in IntelR SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-20390
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002...
CVE-2022-20386
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328...
CVE-2022-20391
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000...
CVE-2022-20389
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004...
CVE-2022-20388
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323...
CVE-2022-20210
The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...
CVE-2022-20385
a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens.Product: AndroidVersions: Android SoCAndroid ID: A-238379819...
CVE-2022-20235
The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption issues.Product:...
CVE-2022-20431
There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221238...
CVE-2021-38786
There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash denial of service...
CVE-2021-27208
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...