MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper input validation, which may result in an out-of-bounds write and can be exploited by an attacker to cause an escalation of local...

多款MediaTek产品竞争条件问题漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek, which can be exploited by attackers to cause an escalation of privileges. The following products and versions are affected: MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S...

GSD-2022-1002145 tpm: fix reference counting for struct tpm_chip

tpm: fix reference counting for struct tpmchip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001966 gpio: Restrict usage of GPIO chip irq members before initialization

gpio: Restrict usage of GPIO chip irq members before initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001936 tpm: fix reference counting for struct tpm_chip

tpm: fix reference counting for struct tpmchip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001824 net: dsa: fix panic on shutdown if multi-chip tree failed to probe

net: dsa: fix panic on shutdown if multi-chip tree failed to probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001669 gpio: Restrict usage of GPIO chip irq members before initialization

gpio: Restrict usage of GPIO chip irq members before initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001509 net: dsa: fix panic on shutdown if multi-chip tree failed to probe

net: dsa: fix panic on shutdown if multi-chip tree failed to probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001342 gpio: Restrict usage of GPIO chip irq members before initialization

gpio: Restrict usage of GPIO chip irq members before initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001241 net: dsa: Avoid cross-chip syncing of VLAN filtering

net: dsa: Avoid cross-chip syncing of VLAN filtering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001190 net: dsa: fix panic on shutdown if multi-chip tree failed to probe

net: dsa: fix panic on shutdown if multi-chip tree failed to probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1000999 gpio: Restrict usage of GPIO chip irq members before initialization

gpio: Restrict usage of GPIO chip irq members before initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29782

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists in the Linux Kernel that could cause a panic on shutdown if a multi-chip tree failed to probe. The actual impact and attack plausibility have not yet been proven...

PT-2022-30097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists in the Linux Kernel that could cause a panic on shutdown if a multi-chip tree fails to probe. The actual impact and attack plausibility have not yet been proven...

PT-2022-29463

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential issue exists in the Linux Kernel that could cause a panic on shutdown if a multi-chip tree fails to probe. The actual impact and attack plausibility have not yet been proven...

PT-2022-29995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-29328

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-30209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns a reference counting problem for the struct tpm chip. It was introduced in version v4.12 and fixed in version v5.15.33. The actual impact and attack plausibility have not y...

PT-2022-29615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the restriction of usage of GPIO chip irq members before initialization. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.17.1 Description The issue is related to a reference counting problem for the struct tpm chip in the Linux Kernel. The actual impact and potential for attack have not been proven yet. Recommendations For...