1829 matches found
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
...
PT-2025-36379
Name of the Vulnerable Software and Affected Versions: System-on-a-chip SOC affected versions not specified Description: Improper isolation of shared resources on a System-on-a-chip SOC could allow a privileged attacker to tamper with the contents of the PSP reserved DRAM region, potentially...
PT-2025-36396
Name of the Vulnerable Software and Affected Versions: TEE SOC Driver affected versions not specified Description: Insufficient parameter sanitization in the TEE SOC Driver could allow an attacker to issue a malformed DRV SOC CMD ID SRIOV SPATIAL PART command, potentially leading to read or write...
CVE-2023-31325: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...
CVE-2025-9709
CVE-2025-9709 concerns the Nordic Semiconductor nRF52810, where the On-Chip Debug and Test Interface has improper access control and insufficient protection against electromagnetic fault injection (EM-FI). Reports describe that an attacker can perform EM fault injection to bypass the built-in APP...
CVE-2025-9709 NRF52810 Runtime EM Fault Injection APPROTECT Bypass
On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection EM-FI in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the least amount of modification to the...
Nordic Semiconductor nRF52810 安全漏洞
The Nordic Semiconductor nRF52810 is a chip from Nordic Semiconductor, Norway. A security vulnerability exists in the Nordic Semiconductor nRF52810 that stems from improper access control and insufficient protection against electromagnetic fault injection, which could lead to bypassing APPROTECT...
PT-2025-36257
Name of the Vulnerable Software and Affected Versions: Nordic Semiconductor nRF52810 affected versions not specified Description: The On-Chip Debug and Test Interface in the nRF52810 has improper access control and insufficient protection against Electromagnetic Fault Injection EM-FI. This allows...
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
...
soc: qcom: pdr: protect locator_addr with the main mutex
...
reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
...
wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
...
Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7721-1)
"The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7721-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in th...
USN-7721-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PA-RISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x...
CVE-2025-51643
Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...
CVE-2025-51643: Exposure of Sensitive Information to an Unauthorized Actor
Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...
Linux Distros Unpatched Vulnerability : CVE-2020-10370
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain Cypress and Broadcom Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a...
CVE-2025-25733
The Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) are affected by an incorrect access control issue in the SPI Flash Chip . This vulnerability affects versions v3.2.0.829.23 , v3.8.0.1119.42 , and v4.6.0.1211.28 . A physically proximate attacker can exploit this flaw to arbitrarily ...
Vulnerability of the tpm_dev_release() function in the drivers/char/tpm/tpm-chip.c module – The driver for supporting alphanumeric devices with TPM cores in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module – The driver for supporting alphanumeric devices with TPM cores in Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker ...
CVE-2025-25733: Security-Sensitive Hardware Controls with Missing Lock Bit Protection
Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the devi...