CVE-2025-1122

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NVRead functionality during the Challenge-Response process...

CVE-2025-1292

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NVRead functionality during the Challenge-Response process...

GSD-2022-1003059 char: tpm: cr50_i2c: Suppress duplicated error message in .remove()

char: tpm: cr50i2c: Suppress duplicated error message in .remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-31623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.46 Description The issue is related to the suppression of duplicated error messages in the remove function of the cr50 i2c module. The actual impact and attack plausibility have not yet been proven...

PT-2022-31322

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the suppression of duplicated error messages in the remove function of the cr50 i2c module. The actual impact and attack plausibility have not yet been proven...

PT-2022-30996

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the suppression of duplicated error messages in the remove function of the cr50 i2c module in the Linux Kernel. The actual impact and attack plausibility have not yet...