Design/Logic Flaw

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

CVE-2021-34387

CVE-2021-34387 affects NVIDIA Jetson Trusty TLK/Trusty on TrustZone. The vulnerability arises from access permission settings where the DRAM region reserved for TrustZone is identity-mapped by the TLK with read, write, and execute permissions, allowing write access to kernel code and data that sh...

Kconfig-Hardened-Check - A Tool For Checking The Hardening Options In The Linux Kernel Config

Motivation There are plenty of Linux kernel hardening config options. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs manually. So let the computers do their job!...

Linux kernel out-of-bounds read vulnerability (CNVD-2021-53933)

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. An out-of-bounds read vulnerability exists in arch/arm/mach-footbridge/personal-pci.c of the Linux kernel, which stems from a lack of checking for values that should not be negative. No details of th...

DEBIAN-CVE-2021-32078

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

AZL-6559 CVE-2021-32078 affecting package kernel for versions less than 5.15.2.1-1

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

CVE-2021-32078

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

UBUNTU-CVE-2021-32078

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

Design/Logic Flaw

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

CVE-2021-32078

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

Linux kernel 缓冲区错误漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. An out-of-bounds read vulnerability exists in arch/arm/mach-footbridge/personal-pci.c of the Linux kernel, which stems from a lack of checking for values that should not be negative. No details of th...

PT-2024-11326 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference counting issue in the Linux kernel's iommu/arm-smmu component causes a refcount leak when arm smmu rpm get fails. The arm smmu rpm get function invokes pm runtime get sync,...

PT-2024-11324 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference counting issue occurs in the Linux kernel's iommu/arm-smmu component, specifically in the arm smmu iova to phys hard function. This issue arises when error scenarios occur ...

SUSE: Security Advisory (SUSE-SU-2021:0521-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:3309-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities fixed in Xen

Vulnerabilities have been fixed in Xen. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS. Access to system data Increased user privileges The vulnerabilities with CVE core core CVE-2021-0089 and CVE-2021-28692...

The vulnerability in the architecture of Apple M1 chips, related to the open access from the EL0 mode of the ARM architecture registers under the code s3_5_c15_c10_1, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Apple M1 chip’s architecture is related to the open access from the EL0 mode of the ARM architecture registers, under the code s35c15c101. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...

SUSE: Security Advisory (SUSE-SU-2017:2598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xen/arm: Boot modules are not scrubbed

ISSUE DESCRIPTION The bootloader will load boot modules e.g. kernel, initramfs... in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the allocator. Unfortunately, i...