SUSE CVE-2025-68176

In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdnspcie::ops before using it cdnspcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doesn't set the ops...

CVE-2025-68238 mtd: rawnand: cadence: fix DMA device NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer dmadev was being dereferenced before ensuring that cdnsctrl-dmac is properly initialized. Move the assignment of dmadev after successfully...

CVE-2025-68176

Technical details about CVE-2025-68176 are not publicly provided in the supplied documents. No affected product/version or fix specifics are disclosed here. Monitor for updates from vendors.

CVE-2025-68176 PCI: cadence: Check for the existence of cdns_pcie::ops before using it

In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdnspcie::ops before using it cdnspcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doesn't set the ops...

CVE-2025-38094 net: cadence: macb: Fix a possible deadlock in macb_halt_tx.

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macbhalttx. There is a situation where after THALT is set high, TGO stays high as well. Because jiffies are never updated, as we are in a context with interrupts disabled, we never...

CVE-2025-22067

In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdnsmrvlxspisetupclock If requestedclk 128, cdnsmrvlxspisetupclock iterates over the entire cdnsmrvlxspiclkdivlist array without breaking out early, causing 'i' to go beyond the arr...

UBUNTU-CVE-2024-38635

In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT. This code is however completely wrong and leads to an out-of-bounds access...

PT-2024-3407

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory double free vulnerability in the Linux kernel's USB Cadence driver. When handling a zero packet, the driver appends an additional zero packet request,...

PT-2021-24718

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a reference leak when pm runtime get sync fails in the i2c cadence driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28822

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a reference leak when pm runtime get sync fails in the i2c cadence driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-24828

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a reference leak when pm runtime get sync fails in the i2c cadence driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-28712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a reference leak when pm runtime get sync fails in the i2c cadence driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...