CVE-2020-36787

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

UBUNTU-CVE-2020-36787

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

CVE-2020-36787 media: aspeed: fix clock handling logic

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

CVE-2020-36787

Summary of CVE-2020-36787 (Linux kernel, Aspeed video clock handling) The issue affects the Video Engine clock management in Aspeed-based platforms (e.g., AST2500 SoCs) where the Video Engine reset was coupled with the eclk reset sequence. The documented sequence (enable eclk → de-assert Video En...

CVE-2020-36787 media: aspeed: fix clock handling logic

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

CVE-2020-36787: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

PT-2025-41061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a memory leak in the soc: aspeed: socinfo component. The issue was addressed by adding a kfree function in error handling to release allocated memory...

kernel: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()

A flaw was found in the aspeed-vhub module in the Linux kernel. A missing decrement of the reference count will cause a memory leak, potentially impacting system performance and resulting in a denial of service...

K65280235: Linux vulnerability CVE-2021-42252

Security Advisory Description An issue was discovered in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka...

SUSE CVE-2021-42252

An issue was discovered in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs becaus...

GSD-2023-1000612 ARM: dts: aspeed: rainier,everest: Move reserved memory regions

ARM: dts: aspeed: rainier,everest: Move reserved memory regions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

The vulnerability of the `aspeed_lpc_ctrl_mmap` function in the drivers/soc/aspeed/aspeed-lpc-ctrl.c file of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the aspeedlpcctrlmmap function in the drivers/soc/aspeed/aspeed-lpc-ctrl.c file of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrit...

GSD-2022-1005592 usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()

usb: aspeed-vhub: Fix refcount leak bug in astvhubinitdesc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005244 usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()

usb: aspeed-vhub: Fix refcount leak bug in astvhubinitdesc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1004558 pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004381 pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

GSD-2022-1004161 pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

PT-2022-32820

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to a potential NULL dereference in the aspeed pinmux set mux function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to a potential NULL dereference in the aspeed pinmux set mux function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...