9639 matches found
PUB-A-512055546
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-512355295
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-512056694
In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Building the Truman Show: A TrustZone-Based Framework for Lightweight Out-Of-Band Kernel Security Monitoring
The increasing number of vulnerabilities in operating systems, together with sophisticated kernel-level threats e.g., rootkits, has weakened the effectiveness of traditional in-kernel protection mechanisms. Since these defenses operate at the same privilege level as the kernel, they share the sam...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002835)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002835 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiodlookuptable Without the terminator, if a conid is passed to...
CVE-2026-80649 firmware: arm_scmi: Fix OOB in scmi_power_name_get()
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix OOB in scmipowernameget scmipowernameget does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, li...
PT-2026-82949
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the arm scmi firmware component. The scmi power name get function fails to validate the domain number provided by an external caller, potentially...
Exploiting Per-Core Leakage: Electromagnetic Side-Channel Monitoring of Multicore Architectures
Multicore processors are increasingly adopted in embedded systems to meet growing performance demands. However, physical side-channel analysis of multicore architectures remains underexplored, as obtaining usable leakage is inherently challenging. Consequently, side-channel security research on...
The vulnerability of the poly1305_blocks_arch() function in the lib/crypto/arm/poly1305-glue.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the poly1305blocksarch function in the lib/crypto/arm/poly1305-glue.c module of the Linux operating system is related to accessing memory beyond the permissible buffer data size limits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerabilities of the functions panthor_fdinfo_gather_group_samples() and panthor_group_create() in the drivers/gpu/drm/panthor/panthor_sched.c driver of Panthor (which supports DRM for ARM Mali CSF-based graphics processors in the Linux operating system) allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions panthorfdinfogathergroupsamples and panthorgroupcreate in the drivers/gpu/drm/panthor/panthorsched.c driver for PanThor support for DRM for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously freed...
The vulnerability of the `panthor_kernel_bodestroy()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the panthorkernelbodestroy function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously freed memory. Exploitin...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: It is required that exactly one Stream ID be used for a vDEVICE. The function armvsmmuvsidtosid maps a guest’s vSID to a single physical Stream ID, taking it from master-streams0. This assumes that a...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear the FFR context field in streaming SVE mode The FFR is a predicate register whose size can range from 16 to 256 bits, depending on the configured vector length. When saving the SVE state in streamin...
MATEE: Efficiently Bridging the Semantic Gap in TrustZone Via Arm Pointer Authentication
Trusted Execution Environments TEEs employ hardware-based isolation mechanisms to safeguard the confidentiality and integrity of sensitive code and data. One such prevalent implementation is Arm TrustZone, which partitions the system into the secure and normal non-secure worlds. However, this...
CVE-2026-74551
A flaw was found in the Linux kernel's hwmon: nzxt-smart2 driver. This vulnerability allows for immediate and deterministic memory corruption on systems with non-coherent CPU architectures, such as ARM or MIPS. When operations like setting a fan speed or updating an interval trigger a USB Direct...
CVE-2026-8810
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...
CVE-2026-8810 HDD Password leakage vulnerability
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...
CVE-2026-8810
On ARM platforms, an architecture-design flaw in HDD Password handling allows an attacker to retrieve the password from UEFI variables. CVSS 6.9 MEDIUM; physical access, high complexity, low privileges required. Exploitation details not provided in the documents.
EUVD-2026-62294
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...
CVE-2026-8810: Insufficiently Protected Credentials
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...