ROS-20261009-73-0288

The vulnerability of the drivers/firmware/efi/cper.c component of the Linux operating system is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260924-73-0027

The vulnerability of the mesonsmprobe function in the drivers/firmware/meson/mesonsm.c file of the Linux kernel’s firmware module is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

WS-2021-0548

Linux/Kernel is vulnerable to string overflow in SCPI genpd driver in drivers/firmware/scpipmdomain.c...

Linux drivers/firmware/arm_scmi DoS

The vulnerability of the drivers/firmware/armscmi components of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-50159: Double Free

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix the double free in scmidebugfscommonsetup Clang static checkerscan-build throws below warning： | drivers/firmware/armscmi/driver.c:line 2915, column 2 | Attempt to free released memory. When...

PT-2024-8529

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.61 Description The issue is related to a double free in the scmi debugfs common setup function in the Linux kernel. This occurs when devm add action or reset fails, causing scmi debugfs common cleanup to run...

PT-2024-41617

Уязвимость функции qcom scm get tzmem pool модуля drivers/firmware/qcom/qcom scm.c - драйвера поддержки прошивок ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-8286

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an incorrect allocation size in the efi/capsule-loader component of the Linux kernel. Specifically, the allocation with sizeofvoid on 32-bit architectures is not...

PT-2023-36724

Уязвимость функции do feature check call модуля drivers/firmware/xilinx/zynqmp.c драйвера прошивок ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-36760

Уязвимость функции dmi sysfs register handle модуля drivers/firmware/dmi-sysfs.c драйвера прошивок ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-38162

Уязвимость функции rpi firmware probe модуля drivers/firmware/raspberrypi.c драйвера прошивок ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-40307

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free...

PT-2022-37902

Уязвимость функции sysfb create simplefb модуля drivers/firmware/sysfb simplefb.c драйвера поддержки прошивок ядра операционной системы Linux связана с некорректным ведением счетчиков использования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1153)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow...

Code injection

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032...

CVE-2019-20908

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032...

CVE-2019-20908: Undefined Security Weakness

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032...

PT-2019-5798

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4 Description An issue in the Linux kernel's drivers/firmware/efi/efi.c allows attackers to bypass lockdown or secure boot restrictions due to incorrect access permissions for the efivar ssdt ACPI variable. Thi...

CVE-2009-0322: Undefined Security Weakness

drivers/firmware/dellrbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service system crash via a read system call that specifies zero bytes from the 1 imagetype or 2 packetsize file in /sys/devices/platform/dellrbu/...