CVE-2022-50190 spi: Fix simplification of devm_spi_register_controller

In the Linux kernel, the following vulnerability has been resolved: spi: Fix simplification of devmspiregistercontroller This reverts commit 59ebbe40fb51 "spi: simplify devmspiregistercontroller". If devmaddaction fails in devmaddactionorreset, devmspiunregister will be called, it decreases the...

PT-2025-26118 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF issue was found in the Linux kernel, specifically in the tegra20-slink SPI driver. The problem occurs when spi unregister master is called, which decreases the...

AZL-63791 CVE-2025-37801 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spiimxsetupxfer Add check for the return value of spiimxsetupxfer. spiimx-rx and spiimx-tx function pointer can be NULL when spiimxsetupxfer return error, and make NULL pointer dereference. Unable to...

The vulnerability of the intel_spi_populate_chip() function in the Linux kernel’s SPI device support driver allows a hacker to cause a service failure.

The vulnerability of the intelspipopulatechip function in the Linux kernel’s SPI device support driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

CLSA-2025-1739522296 Fix of 7 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-url: https://ubuntu.com/security/CVE-2024-41020 - filelock: Fix fcntl/close race recovery compat path CVE-url: https://ubuntu.com/security/CVE-2024-43892 - memcg...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amdsetspifreq If speedhz AMDSPIMINHZ, amdsetspifreq iterates over the entire amdspifreq array without breaking out early, causing 'i' to go beyond the array bounds. Fix that by...

CVE-2024-46769

CVE-2024-46769 relates to the Linux kernel SPI Intel driver. A check for the pointer returned by devm_kasprintf() in intel_spi_populate_chip() was missing, allowing a NULL pointer to be used for pdata->name. The vulnerability has been resolved in the kernel with the fix described in the linked...

PT-2024-7180

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc5-gc7b0e37c8434 Description The vulnerability is related to an out-of-bounds issue in the nxp fspi exec op function when writing data that is not 4 byte aligned to TX FIFO. This can be reproduced by...

PT-2024-11286 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds access in the Linux kernel's spi: bcm2835 driver. This occurs when there are more than 4 slaves, and the num chipselect limitation is silently...

The vulnerability of the fsl_lpspi_probe() function in the drivers/spi/spi-fsl-lpspi.c file of the Linux kernel’s SPI (Serial Peripheral Interface) driver allows a hacker to cause a system failure.

The vulnerability of the fsllpspiprobe function in the drivers/spi/spi-fsl-lpspi.c file of the Linux kernel’s SPI Serial Peripheral Interface driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-27028

In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spitransfer can be a NULL pointer, so the interrupt handler may end up writing to the invalid memory and cause crashes. Add a check to trans-txbuf...

CVE-2024-26895

CVE-2024-26895 — Linux kernel (wifi: wilc1000) use-after-free during vif cleanup . The issue occurs when unregistering net devices while traversing the vif list, because a netdevice’s private vif data is freed (due to needs_free_netdev being set during registration) and the loop subsequently acce...

SUSE CVE-2024-26776

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQNONE if no interrupts were detected Return IRQNONE from the interrupt handler when no interrupt was detected. Because an empty interrupt will cause a null pointer error: Unable to handle kernel NULL...

CVE-2021-47161

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspirequestdma' should be undone by a 'dspireleasedma' call in the error handling path of the probe function, as already done in the remove function...

CVE-2021-47051

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: Fix PM reference leak in lpspipreparexferhardware pmruntimegetsync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. Fix it by replacing it with...

DEBIAN-CVE-2021-47051

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: Fix PM reference leak in lpspipreparexferhardware pmruntimegetsync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. Fix it by replacing it with...

SUSE CVE-2020-12769

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwspiirq and dwspitransferone, aka CID-19b61392c5a8...

PT-2022-34607 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.8 Description: The issue is related to a bitbang fix for lsb-first Rx in the SPI driver. It was introduced in version v5.18 and fixed in version v5.19.9. The actual impact and attack plausibility have...

UVI-2021-1000285 spi: Fix use-after-free with devm_spi_alloc_*

spi: Fix use-after-free with devmspialloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4300-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4300-1 advisory. It was discovered that the KVM implementation in the Linux kernel, when paravirtual TLB flushes are enabled in guests, the hypervisor in some situations...