CVE-2022-34835

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the doi2cmd function...

Das U-Boot 缓冲区错误漏洞

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in Das U-Boot version 2022.07-rc5 and earlier versions, which stems from...

PT-2022-22384 · Unknown +5 · Das U-Boot +5

Name of the Vulnerable Software and Affected Versions: Das U-Boot versions through 2022.07-rc5 Description: The issue is caused by an integer signedness error and a resultant stack-based buffer overflow in the "i2c md" command. This enables the corruption of the return address pointer of the do i...

GSD-2022-1003461 i2c: ismt: prevent memory corruption in ismt_access()

i2c: ismt: prevent memory corruption in ismtaccess This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.45 by commit...

GSD-2022-1003424 media: i2c: max9286: fix kernel oops when removing module

media: i2c: max9286: fix kernel oops when removing module This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003193 i2c: ismt: prevent memory corruption in ismt_access()

i2c: ismt: prevent memory corruption in ismtaccess This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

GSD-2022-1003138 media: i2c: max9286: fix kernel oops when removing module

media: i2c: max9286: fix kernel oops when removing module This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003059 char: tpm: cr50_i2c: Suppress duplicated error message in .remove()

char: tpm: cr50i2c: Suppress duplicated error message in .remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002879 i2c: ismt: prevent memory corruption in ismt_access()

i2c: ismt: prevent memory corruption in ismtaccess This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

GSD-2022-1002829 media: i2c: dw9714: Disable the regulator when the driver fails to probe

media: i2c: dw9714: Disable the regulator when the driver fails to probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002801 media: i2c: max9286: fix kernel oops when removing module

media: i2c: max9286: fix kernel oops when removing module This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-32165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31869

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31322

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the suppression of duplicated error messages in the remove function of the cr50 i2c module. The actual impact and attack plausibility have not yet been proven...

PT-2022-30996

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the suppression of duplicated error messages in the remove function of the cr50 i2c module in the Linux Kernel. The actual impact and attack plausibility have not yet...

PT-2022-31023

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v2.6.18 through v5.18.2 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v2.6.18 through v4.9.317 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31354

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v2.6.18 through v5.17.13 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32273

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v2.6.18 through v4.14.282 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32065

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...