CVE-2022-49507

In the Linux kernel, the following vulnerability has been resolved: regulator: da9121: Fix uninit-value in da9121assignchipmodel KASAN report slab-out-of-bounds in regmapinit as follows: BUG: KASAN: slab-out-of-bounds in regmapinit drivers/base/regmap/regmap.c:841 Read of size 1 at addr...

CVE-2024-56785

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found, but node is n...

AZL-55331 CVE-2024-56785 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found, but node is n...

AZL-55375 CVE-2024-56785 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found, but node is n...

CVE-2024-56785 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found, but node is n...

CVE-2024-56785

CVE-2024-56785 affects the Linux kernel lifecycle on MIPS Loongson64 platforms (ls7a). The issue centers on DTS/PCIe port node handling: incorrect PCIe port node definitions in ls7a DTS files caused dtc/interpreter warnings and a runtime warning related to address-cell/interrupt-provider mappings...

Malicious code in yapi-to-dts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ac9578e805bf62c4ef65a0db4a50d37e5fa4953caa1e4774265c4f5d86277a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12063 Malicious code in yapi-to-dts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ac9578e805bf62c4ef65a0db4a50d37e5fa4953caa1e4774265c4f5d86277a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MOBATIME Network Master Clock 安全漏洞

MOBATIME Network Master Clock is a clock program from MOBATIME, Inc. It is used to build and run large-scale clock systems. A security vulnerability exists in MOBATIME Network Master Clock DTS 4801. An attacker exploiting this vulnerability could gain initial access via SSH using default...

MAL-2024-10861 Malicious code in spex-dts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93132811b829ac6c32b8cf1e2c2c6bcaba42147399c45c495f0879e22871140f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spex-dts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93132811b829ac6c32b8cf1e2c2c6bcaba42147399c45c495f0879e22871140f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53046 arm64: dts: imx8ulp: correct the flexspi compatible string

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8ulp: correct the flexspi compatible string The flexspi on imx8ulp only has 16 LUTs, and imx8mm flexspi has 32 LUTs, so correct the compatible string here, otherwise will meet below error: 1.119072 ------------ cut...

kernel: thermal: intel: quark_dts: fix error pointer dereference

An error pointer dereference was found in the Intel Quark thermal driver. When allocsocdts fails and returns an error pointer, attempting to free it causes a kernel crash...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.334.6.el7 - loop: Fix a race between loop detach and loop open Gulam Mohamed Orabug: 36197800 - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs Alexandre Chartre Orabug: 36672495 - x86/bhi: Avoid warning in DB handler due to BHI mitigation Alexandre Chartre...

CVE-2023-43527

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527 Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527 Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527

CVE-2023-43527 is an information-disclosure issue arising from parsing the dts header atom in Video. The vulnerability affects Qualcomm-related components (including closed-source parts) and is referenced across multiple sources (Red Hat, NVD, CVE lists, and Pixel advisories) without explicit exp...

PT-2024-13100 · Video · Video

Name of the Vulnerable Software and Affected Versions: Video affected versions not specified Description: The issue is related to information disclosure while parsing the dts header atom in Video. There is no information about the estimated number of potentially affected devices worldwide or...

SUSE CVE-2023-52561

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader. It fixes a kernel panic arm-smmu: Unhandled...