8604 matches found
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
...
An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.
...
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).
...
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
...
arm64: set UXN on swapper page tables
...
KVM: arm64: Fix circular locking dependency
...
arm64: set UXN on swapper page tables
...
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)
...
PT-2025-35948
Name of the Vulnerable Software and Affected Versions: NVIDIA DOCA affected versions not specified Description: NVIDIA DOCA contains an issue in the collectx-dpeserver Debian package for arm64 architectures that may allow an attacker with low privileges to escalate privileges. A successful exploi...
PT-2025-44128
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The TRBE driver in the Linux kernel does not properly handle allocation failures. When buffer allocation fails, the driver returns an error code, but the calling function only checks for...
firmware: arm_scmi: Fix double free in SMC transport cleanup path
...
Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.
...
arm64: errata: Add Cortex-A520 speculative unprivileged load workaround
...
An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.
...
Linux Distros Unpatched Vulnerability : CVE-2018-12886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stackprotectprologue in cfgexpand.c and stackprotectepilogue in function.c in GNU Compiler Collection GCC 4.1 through 8 under certain circumstances generate...
Linux Distros Unpatched Vulnerability : CVE-2024-6287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a...
Linux Distros Unpatched Vulnerability : CVE-2022-33747
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When lar...
Linux Distros Unpatched Vulnerability : CVE-2019-17349
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service infinite loop involving a LoadExcl or StoreExcl operation...
Linux Distros Unpatched Vulnerability : CVE-2022-23033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm: guestphysmapremovepage not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm p2mremovemapping,...
PT-2025-39126
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation issue was identified within the EDMA driver in the Linux kernel. The queue priority map was allocated with an insufficient memory size during the edma setup from hw...