499 matches found
PT-2022-30290
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-30683
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
GSD-2022-1000522 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...
GSD-2022-1000438 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...
GSD-2022-1000379 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.101 by commit...
GSD-2022-1000343 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.180 by commit...
PT-2022-28617
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28796
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.3 through v5.16.9 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...
PT-2022-28653
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.94 through v5.10.100 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-28712
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.23 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...
PT-2024-10520
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ee1004 eeprom read function not properly limiting the number of bytes to read at once. Specifically, i2c smbus read i2c block data or emulated takes the lengt...
PT-2025-7944
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.6.0 Description A bug was found in the Linux kernel during fuzzing, specifically in the ath5k eeprom read pcal info 5111 function. The issue arises when none of the curves are selected in the loop, causing the...
CVE-2021-3843
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
Code injection
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2021-3843
CVE-2021-3843 concerns Lenovo ThinkPad BIOS/CSME: a vulnerability in the SMI (System Management Interrupt) callback function that handles EEPROM access. The issue is described as an input validation error in the SMI callback used in the CSME configuration, which can allow a local attacker with el...
CVE-2021-3843
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2021-3843: Improper Input Validation
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
PT-2021-22123
Name of the Vulnerable Software and Affected Versions ThinkPad models affected versions not specified Description A potential issue in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Recommendatio...
