PT-2022-30654

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a reference counting problem for the struct tpm chip. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2022-30418

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a reference counting problem for the struct tpm chip. It was introduced in version v4.12 and fixed in version v5.10.110. The actual impact and attack plausibility have not...

PT-2022-30558

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a fix in reference counting for struct tpm chip. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30278

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-29669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior to v5.16.20,...

PT-2022-29615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the restriction of usage of GPIO chip irq members before initialization. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29463

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential issue exists in the Linux Kernel that could cause a panic on shutdown if a multi-chip tree fails to probe. The actual impact and attack plausibility have not yet been proven...

PT-2022-29942

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns the usage of GPIO chip irq members before initialization. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-30209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns a reference counting problem for the struct tpm chip. It was introduced in version v4.12 and fixed in version v5.15.33. The actual impact and attack plausibility have not y...

PT-2022-30097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists in the Linux Kernel that could cause a panic on shutdown if a multi-chip tree fails to probe. The actual impact and attack plausibility have not yet been proven...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44614)

Google Android, a Linux-based open source operating system from Google, is vulnerable to buffer overflow. The vulnerability originates in the TitanM chip, where out-of-bounds writes may occur due to a lack of boundary checking. An attacker could exploit the vulnerability to cause a local privileg...

tildearrow Furnace Denial of Service Vulnerability

tildearrow Furnace is a multi-system chip tuning tracker compatible with the DefleMask module. tildearrow Furnace has a security vulnerability that stems from an incomplete fix for CVE-2022-1211, which can be exploited by attackers to cause a denial of service vulnerability...

CVE-2022-27152

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...

CVE-2022-27152

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...

CVE-2022-27152

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...

CVE-2022-27152: Undefined Security Weakness

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...

Lessons in IoT Hacking: How to Dead-Bug a BGA Flash Memory Chip

Dead-bugging — what is that, you ask? The concept comes from the idea that a memory chip, once it’s flipped over so you can attach wires to it, looks a little like a dead bug on its back. So why would we do this for the purposes of IoT hacking? The typical reason is if you want to extract the...

CVE-2021-33096

A denial-of-service flaw was found due to improper isolation of shared resources in the network on chip for the IntelR 82599 Ethernet Controllers and Adapters. This may allow an authenticated user to potentially create a denial of service via local access. Mitigation Mitigation for this issue is...

PT-2025-8000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition issue exists due to the exposure of GPIO chip irq members before they are fully initialized. This can lead to a kernel NULL pointer dereference, as observed with the...

CVE-2021-39729

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...