1829 matches found
kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service
A flaw was found in the Linux kernel's net/mlx5 component. A local user could exploit a use-after-free vulnerability during the shutdown process when embedded chip virtual function ECVF vports are unloaded. This occurs because the vport access control list ACL ingress table is not properly...
The vulnerability of the mt6797_mt6351_dev_probe() function in the sound module/soc/mediatek/mt6797/mt6797-mt6351.c file, which is part of the Linux operating system’s sound support for SoC cores, allows a hacker to cause a service failure.
The vulnerability of the mt6797mt6351devprobe function in the sound module/soc/mediatek/mt6797/mt6797-mt6351.c file, which is related to Linux operating system SoC sound support, is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause ...
The vulnerability of the graph_util_parse_dai() function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the graphutilparsedai function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s sound support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the ch341_transfer_one() function in the drivers/spi/spi-ch341.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ch341transferone function in the drivers/spi/spi-ch341.c module of the Linux operating system’s SPI device driver relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
The vulnerability of the parse_dai_link_info() function in the sound/soc/mediatek/common/mtk-soundcard-driver.c module allows a hacker to cause a service failure in the Linux operating system’s SoC audio kernel.
The vulnerability of the parsedailinkinfo function in the sound/soc/mediatek/common/mtk-soundcard-driver.c file relates to the sound support for Linux operating system kernels. It involves errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service...
CVE-2026-26070
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to std::map concurrent access container/optional corruption possible. The trigger is an EV SoC update with powermeter periodic update and unplugging/SessionFinished state. Version 2026.2.0 contains a...
nfc: pn533: properly drop the usb interface reference on disconnect
...
The vulnerability of the regmap_add_irq_chip_fwnode() function in the drivers/base/regmap/regmap-irq.c file of the Linux kernel’s interrupt device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the regmapaddirqchipfwnode function in the drivers/base/regmap/regmap-irq.c file of the Linux kernel’s interrupt device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the __graph_for_each_link() function in the sound/soc/generic/audio-graph-card.c module allows a hacker to trigger a service failure in the Linux operating system’s SoC audio kernel.
The vulnerability of the graphforeachlink function in the sound/soc/generic/audio-graph-card.c module related to Linux’s audio SoC kernel is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to trigger a service failure...
SUSE CVE-2026-23308
In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbrirqmask' and 'eqbrirqack' are also called in the callback function 'eqbrirqmaskack'. This is done to avoid source code duplication. The problem, is that ...
The vulnerabilities of the functions wcd938x_tx_mode_get() and wcd938x_rx_hph_mode_get() in the sound module/soc/codecs/wcd938x.c, which are part of the Linux operating system’s SoC audio support, allow attackers to gain access to protected information or cause service failures.
The vulnerabilities of the functions wcd938xtxmodeget and wcd938xrxhphmodeget in the sound module/soc/codecs/wcd938x.c are related to buffer overflow attacks. Exploiting these vulnerabilities can allow attackers to gain access to protected information or cause system failures...
The vulnerability of the rx_macro_load_compander_coeff() function in the sound/soc/codecs/lpass-rx-macro.c module allows a hacker to access protected information or cause a service failure in the Linux operating system’s SoC kernel.
The vulnerability of the rxmacroloadcompandercoeff function in the sound/soc/codecs/lpass-rx-macro.c module of the Linux operating system’s sound support module is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to access protect...
The vulnerability of the snd_soc_new_compress() function in the sound/soc/soc-compress.c module allows a hacker to cause a system failure in Linux-based SoC systems.
The vulnerability of the sndsocnewcompress function in the sound/soc/soc-compress.c module, which is part of the Linux SoC audio support, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
Furnace 安全漏洞
Furnace is a chip tuning tracker developed by tildearrow. Versions of Furnace prior to 0.7 contained a security vulnerability, which was caused by out-of-bound reading, potentially causing issues with the program file flac.C...
CVE-2026-0849 crypto: ATAES132A response length allows stack buffer overflow
Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution...
ATLAS: AI-Assisted Threat-To-Assertion Learning for System-On-Chip Security Verification
This work presents ATLAS, an LLM-driven framework that bridges standardized threat modeling and property-based formal verification for System-on-Chip SoC security. Starting from vulnerability knowledge bases such as Common Weakness Enumeration CWE, ATLAS identifies SoC-specific assets, maps...
The vulnerability of the mc_probe() function in the sound/soc/intel/boards/sof_sdw.c file allows a hacker to cause a system failure in the Linux operating system’s SoC kernel support for audio.
The vulnerability of the mcprobe function in the sound/soc/intel/boards/sofsdw.c file, which is part of the Linux operating system’s audio support for SoC cores, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-54514
Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity...
