PT-2023-34456 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the i2c mux reg check, where the return value after calling platform get resource is not properly checked. This is an automated ID intended to aid in discovery of...

PT-2023-33872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the initialization of the AUX channel in the it6505 i2c probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-33727

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the i2c mux reg check, where the return value after calling platform get resource is not properly checked. This is an automated ID intended to aid in discovery of...

PT-2023-34546

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the elants i2c component, specifically its handling of the reset GPIO when power is off. The actual impact and potential for attack have not been fully determined...

PT-2023-34708

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns the elants i2c component, specifically with handling the reset GPIO when power is off. The actual impact and potential for attack have not been proven yet. Recommendations...

PT-2023-34537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A null pointer dereference issue exists in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2023-34234

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A null pointer dereference issue exists in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A potential security issue exists due to a null pointer dereference in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2023-34141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the i2c mux reg check, where the return value after calling platform get resource is not properly checked. This is an automated ID intended to aid in discovery of...

PT-2023-34703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 4.9.336 Description A null pointer dereference issue exists in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-33845

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns the elants i2c component, which does not properly handle the reset GPIO when power is off. This could potentially lead to a security vulnerability, although the actual impac...

PT-2023-33309 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a memory leak in the raydium i2c send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

OESA-2023-1037 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a...

CVE-2023-20528

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

Input validation

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

CVE-2023-20528

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

CVE-2023-20528

CVE-2023-20528 concerns the AMD System Management Unit (SMU) . The issue is caused by insufficient input validation in the SMU firmware , which could let a physical attacker exfiltrate SMU memory contents via the I2C bus, potentially resulting in a loss of confidentiality. Affected product scope ...

CVE-2023-20528: Improper Input Validation

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

CVE-2022-25697

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables...

Input validation

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables...