1829 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-53866
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: soc-compress: Reposition and add pcmmutex If paniconwarn is set and compress streamDPCM is started, then kernel panic occurred because card-pcmmutex isn'...
CVE-2023-53768 regmap-irq: Fix out-of-bounds access when allocating config buffers
In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fix out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmapaddirqchipfwnode, the intent is to allocate a matrix with numconfigbases rows and...
The vulnerability of the dapm_widget_list_create() function in the sound module/soc/soc-dapm.c file, which is part of the Linux operating system’s SoC audio support, allows a hacker to cause a service failure.
The vulnerability of the dapmwidgetlistcreate function in the sound/soc/soc-dapm.c module of the Linux operating system’s sound support module is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the tpm_hwrng_read() function in the drivers/char/tpm/tpm-chip.c module – A driver for supporting alphanumeric devices with TPM cores in the Linux operating system, which allows a hacker to cause a service failure.
Vulnerability of the tpmhwrngread function in the drivers/char/tpm/tpm-chip.c module – The driver for supporting alphanumeric devices with TPM cores in Linux operating systems is vulnerable due to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service...
EUVD-2025-200284
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on ESP32, receiving a malformed VENDOR DEPENDENT command from a peer device can cause the Bluetooth stack to access memory before validating the command...
The vulnerability of the OpenVM platform, related to incorrect calculations of the size of the allocated buffer, allows a hacker to force the registry to accept a different value.
The vulnerability of the OpenVM platform is related to incorrect calculations of the size of the buffer allocated in byte-based decomposition of pc on the AUIPC chip. Exploiting this vulnerability can allow a remote attacker to force the destination register to accept a different value...
CVE-2025-33187
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...
CVE-2025-33187
CVE-2025-33187 affects NVIDIA DGX Spark GB10, with a vulnerability in the SROOT component that could allow an attacker with local, low-privilege access to reach SoC protected areas. Exploitation could lead to code execution, information disclosure, data tampering, denial of service, or privilege ...
CVE-2025-33187
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...
Constant Time Issue with Xtensa-based ESP32 and X22519
...
PT-2025-48048
Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark GB10 Description The NVIDIA DGX Spark GB10 contains a flaw in the SROOT component. An attacker with privileged access could potentially gain access to System on a Chip SoC protected areas. A successful exploit may lead to code...
NVIDIA DGX Spark 安全漏洞
The NVIDIA DGX Spark is a personal AI computer from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX Spark GB10, which originates from privileged access to an accessible SoC protected area in SROOT, and could result in code execution, information disclosure, data tampering, denia...
CVE-2025-48507
The security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC...
CVE-2025-48507
The security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC...
PT-2025-47854
The Secure Flag passed to Versal™ Adaptive SoC’s Arm® Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they...
EUVD-2025-198523
Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of...
CVE-2025-12888 Constant Time Issue with Xtensa-based ESP32 and X22519
Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of...
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot
...
USN-7835-6: Linux kernel (AWS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
