GSD-2021-1000280 spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op

spi: spi-zynqmp-gqspi: fix use-after-free in zynqmpqspiexecop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000367 drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train()

drm: xlnx: zynqmp: fix a memset in zynqmpdptrain This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

PT-2021-24848

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.10.36 Description: The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attac...

PT-2021-28743

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the spi-zynqmp-gqspi component in the Linux Kernel, where it fails to handle a specific error condition properly, potentially leading to memory-related issues. The actu...

PT-2021-24849

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: A potential issue exists where the spi-zynqmp-gqspi component of the Linux Kernel may return -ENOMEM if dma map single fails. The actual impact and attack plausibility have not yet been...

PT-2021-28843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description A potential issue exists where the spi-zynqmp-gqspi component of the Linux Kernel may return -ENOMEM if dma map single fails. The actual impact and attack plausibility have not yet been prove...

PT-2021-28745

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-24751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in Linux Kernel version v5.12.4. The actual impact...

PT-2021-28842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.36 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attack...

PT-2021-28832

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-24737

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.12.4...

PT-2021-24838

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-28731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.12.4...

PT-2024-11140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been resolved in the Linux kernel, specifically in the spi-zynqmp-gqspi component. The issue occurs when handling op-addr, which uses the buffer "tmpbuf" after...

PT-2024-11139 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the spi-zynqmp-gqspi controller in the Linux kernel, which supports 44-bit address space on AXI in DMA mode. If the dma map single function fails, it...