PT-2023-33466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19 Description The issue arises when the early init dt scan memory function fails, leading to the execution of of/fdt: run soc memory setup. This could potentially have security implications, although the...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from incorrect boundary checking in fdtpathoffsetnamelen in fdtro.c. An out-of-bounds read may exist, which could lead to the disclosure of local information that...

PT-2022-26499

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description In the fdt path offset namelen function of fdt ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with Syste...

CVE-2022-20498

In fdtpathoffsetnamelen of fdtro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

PT-2022-14639 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to an incorrect bounds check in the fdt next tag function of fdt.c, which could lead to a possible out of bounds read. This could result in local escalation of...

Unbreakable Enterprise kernel security update

5.4.17-2136.311.6 - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' Sherry Yang Orabug: 34535896 5.4.17-2136.311.5 - netfilter: nftables: do not allow RULEID to refer to another chain Thadeu Lima de Souza Cascardo Orabug: 34495567 CVE-2022-2586 - netfilter: nftable...

Microsoft Azure Sphere /proc/fdt mmap operation out-of-bounds read vulnerability

Talos Vulnerability Report TALOS-2022-1497 Microsoft Azure Sphere /proc/fdt mmap operation out-of-bounds read vulnerability August 17, 2022 CVE Number CVE-2022-35821 SUMMARY An out-of-bounds read vulnerability exists in the /proc/fdt mmap operation functionality of Microsoft Azure Sphere 22.02. A...

PT-2022-32841

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue concerns marking FDT FIXED sections as shareable. It was introduced in version v5.10.38 and fixed in version v5.10.132. The actual impact and attack plausibility have not yet been...

PT-2022-32968

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.120 through 5.4.206 Description The issue concerns the marking of FDT FIXED sections as shareable. It was introduced in version v5.4.120 and fixed in version v5.4.207. The actual impact and attack plausibility have no...

PT-2022-32672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue concerns the marking of FDT FIXED sections as shareable. It was introduced in version v5.11 and fixed in version v5.15.56. The actual impact and attack plausibility have not yet bee...

PT-2022-32454

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue concerns the marking of FDT FIXED sections as shareable. It was introduced in version v5.11 and fixed in version v5.18.13. The actual impact and attack plausibility have not yet bee...

Unbreakable Enterprise kernel security update

5.15.0-0.30.19 - net/mlx4: Increase numsrq in lowmemprofile Dave Kleikamp Orabug: 34052160 5.15.0-0.30.18 - Revert ocfs2: mount shared volume without ha stack Junxiao Bi Orabug: 33701900 - KVM: x86/speculation: Disable Fill buffer clear within guests Pawan Gupta Orabug: 34202258 CVE-2022-21123...

Unbreakable Enterprise kernel-container security update

5.15.0-0.30.19 - net/mlx4: Increase numsrq in lowmemprofile Dave Kleikamp Orabug: 34052160 5.15.0-0.30.18 - Revert ocfs2: mount shared volume without ha stack Junxiao Bi Orabug: 33701900 - KVM: x86/speculation: Disable Fill buffer clear within guests Pawan Gupta Orabug: 34202258 CVE-2022-21123...

GSD-2021-1000791 efi/fdt: fix panic when no valid fdt found

efi/fdt: fix panic when no valid fdt found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

UVI-2021-1000791 efi/fdt: fix panic when no valid fdt found

efi/fdt: fix panic when no valid fdt found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

GSD-2021-1000762 efi/fdt: fix panic when no valid fdt found

efi/fdt: fix panic when no valid fdt found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit...

PT-2021-25262

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.12.9 Description: The issue arises when no valid fdt is found, potentially leading to a panic. This problem was introduced in version v5.10 and is fixed in version v5.12.10. Recommendations: For Linux...

PT-2021-25233

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description The issue arises when no valid fdt is found, potentially leading to a panic. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-29227

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.42 Description A potential issue exists where a panic occurs when no valid fdt is found. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29256

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.9 Description The issue is related to a potential panic when no valid fdt is found. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.10...