Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: HID: amdsfh: Free driverdata after destroying the hid device Driver callbacks are no longer called after the hiddestroydevice function is called. Therefore, the driverdata should only be freed after the hiddestroydevice functi...

ROS-20260923-73-0056

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix for shift-out-of-bounds The shift operation on the ‘exp’ and ‘shift’ variables exceeds the maximum number of shift values in the u32 range, resulting in a UBSAN shift-out-of-bounds error. … 6.120512 UBSAN:...

Linux Distros Unpatched Vulnerability : CVE-2023-53703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix for shift-out-of- bounds Shift operation of 'exp' and 'shift' variables...

SUSE CVE-2023-53703

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' variables exceeds the maximum number of shift values in the u32 range leading to UBSAN shift-out-of-bounds. ... 6.120512 UBSAN: shift-out-of-bounds in...

DEBIAN-CVE-2023-53703

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' variables exceeds the maximum number of shift values in the u32 range leading to UBSAN shift-out-of-bounds. ... 6.120512 UBSAN: shift-out-of-bounds in...

CVE-2023-53703: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' variables exceeds the maximum number of shift values in the u32 range leading to UBSAN shift-out-of-bounds. ... 6.120512 UBSAN: shift-out-of-bounds in...

PT-2024-34022

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a memory management vulnerability in the Linux kernel, specifically in the HID: amd sfh component. It has been resolved by switching to a device-managed version of...

DEBIAN-CVE-2024-46746

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: free driverdata after destroying hid device HID driver callbacks aren't called anymore once hiddestroydevice has been called. Hence, hid driverdata should be freed only after the hiddestroydevice function returned as...

PT-2024-7039

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The vulnerability is related to the use of freed memory in the amd sfh get report function, which can lead to a slab-use-after-free bug. This issue can cause a crash or potentially allow an...

SUSE CVE-2021-47133

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix memory leak in amdsfhwork Kmemleak tool detected a memory leak in the amdsfh driver. ==================== unreferenced object 0xffff88810228ada0 size 32: comm "insmod", pid 3968, jiffies 4295056001 age 775.792s h...

PT-2023-36687

Уязвимость функции float to int модуля drivers/hid/amd-sfh-hid/sfh1 1/amd sfh desc.c драйвера подсистемы устройств пользовательского интерфейса ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

PT-2025-43104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the AMD System Firmware Handler SFH HID driver. A shift operation involving the exp and shift variables can exceed the maximum allowable shift...

PT-2021-25264

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.11 through v5.12.9 Description: A memory leak issue was discovered in the amd sfh module. The issue was introduced in version v5.11 and is fixed in version v5.12.10. The actual impact and attack plausibility of this...

PT-2021-29258

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.12.9 Description A memory leak issue was discovered in the amd sfh work function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.11 and fixed i...