CVE-2026-7328 Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service

Missing authorization in Caliptra Core Runtime Firmware INVOKEDPEMLDSA87, CMAESGCMDECRYPTDMA, EXTERNALMAILBOXCMD commands in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond...

CVE-2026-7328: Missing Authorization

Missing authorization in Caliptra Core Runtime Firmware INVOKEDPEMLDSA87, CMAESGCMDECRYPTDMA, EXTERNALMAILBOXCMD commands in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond...

CVE-2025-0040: Improper Access Control

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

EUVD-2026-26630

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans multiple buffer descriptors scatter-gather, axienetfreetxchain sums the per-BD actual length from descriptor status into a caller-provided...

Linux kernel DMA driver Heap Buffer Overflow DoS

The vulnerability of the axichanblockxfercomplete function in the drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c file of the Linux kernel’s DMA driver software is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel DMA driver Heap Buffer Overflow DoS

The vulnerability of the dwaxidmachanslaveconfig function in the drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c module of the Linux kernel’s DMA driver is related to code errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

EUVD-2025-203751

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68318

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68318

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

UBUNTU-CVE-2025-68318

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

CVE-2025-68318: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLKISCRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not setting the AXI clock as critical, which could lead to bus timeouts and system hangs...

AMD Xilinx Run Time Buffer Overflow Vulnerability

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. A buffer overflow vulnerability exists in AMD Xilinx Run Time, which can be exploited by an attacker to cause the reading or corrupti...

CVE-2025-52539: Stack-based Buffer Overflow

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988945 advisory. In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axichanhandleerr function Since there is no...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988835 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fix refcount leak in adiaxiadcattachclient ofparsephandle returns a node...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986620 advisory. In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axichanhandleerr function Since there is no...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986835 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fix refcount leak in adiaxiadcattachclient ofparsephandle returns a node...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986780 advisory. In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axichanhandleerr function Since there is no...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-412694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-412694 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: axi-fan-control Fix possible NULL pointer dereference axifancontrolirqhandler, dependent o...