CVE-2022-25697

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25697

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25697: Out-of-bounds Write

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25697

Memory corruption in i2c buses due to improper input validation while reading address configuration from the i2c driver in Qualcomm Snapdragon Mobile and Snapdragon Wearables. Affected component: i2c driver on Snapdragon platforms. Root cause: input validation issue during address configuration r...

GSD-2022-1008099 i2c: piix4: Fix adapter not be removed in piix4_remove()

i2c: piix4: Fix adapter not be removed in piix4remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1007981 i2c: piix4: Fix adapter not be removed in piix4_remove()

i2c: piix4: Fix adapter not be removed in piix4remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

GSD-2022-1007833 i2c: piix4: Fix adapter not be removed in piix4_remove()

i2c: piix4: Fix adapter not be removed in piix4remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007742 mctp i2c: don't count unused / invalid keys for flow release

mctp i2c: don't count unused / invalid keys for flow release This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-36111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.8 Description A potential memory leak was identified in the nfcmrvl i2c nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-36371

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.154 Description A potential memory leak was identified in the nfcmrvl i2c nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-36258

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description A potential memory leak was identified in the nfcmrvl i2c nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-35997 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns the mctp i2c, where unused or invalid keys are counted for flow release. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36522 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A potential memory leak was identified in the nfcmrvl i2c nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36236

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description The issue is related to the i2c piix4 adapter not being removed in the piix4 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-36354

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.154 Description The issue is related to the i2c piix4 adapter not being removed in the piix4 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-36453

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.224 Description A potential memory leak was identified in the nfcmrvl i2c nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-36576 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: A potential memory leak was identified in the nfcmrvl i2c nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

USN-5764-1: U-Boot vulnerabilities

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...

USN-5764-1 u-boot vulnerabilities

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...

PT-2022-6434

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dvb-usb/az6027.c. The issue arises because messages from user space are not properly checked before...