PT-2022-31623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.46 Description The issue is related to the suppression of duplicated error messages in the remove function of the cr50 i2c module. The actual impact and attack plausibility have not yet been proven...

PT-2022-31647

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to an array-index-out-of-bounds in the pvr2 i2c core init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-7273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use after free in the i2c module of the Linux kernel. This could allow an attacker to impact the confidentiality, integrity, and availability of...

PT-2025-38429

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where the cec unregister adapter function assumes the underlying adapter operations are callable. Specifically, unregistering the CEC adapter can...

new packages: i2c-tools

An update is available for i2c-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

PT-2025-8426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A logic error in the Linux kernel's ASoC rt5645 device removal process can lead to a potential use-after-free issue. The error occurs because the rt5645 i2c remove function cancels the...

GSD-2022-1001642 i2c: dev: check return value when calling dev_set_name()

i2c: dev: check return value when calling devsetname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

GSD-2022-1000959 i2c: dev: check return value when calling dev_set_name()

i2c: dev: check return value when calling devsetname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2022-29232

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to the i2c device, where the return value is not checked when calling the dev set name function. This could potentially lead to security vulnerabilities, although the actu...

PT-2025-8457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been identified, specifically in the cx23885 driver. The issue arises when the driver fails to call the dma set mask function, resulting in a use-after-free...

PT-2022-29915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to the i2c device, where the return value is not checked when calling the dev set name function. This could potentially lead to security vulnerabilities, although the...

GSD-2022-1000438 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX

eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000343 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX

eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.180 by commit...

PT-2022-28617

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.3 through v5.16.9 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2022-28712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.23 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2022-28653

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.94 through v5.10.100 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2024-10520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ee1004 eeprom read function not properly limiting the number of bytes to read at once. Specifically, i2c smbus read i2c block data or emulated takes the lengt...

GSD-2022-1000051 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000042 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...