UVI-2021-1000354 i2c: imx: fix reference leak when pm_runtime_get_sync fails

i2c: imx: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

PT-2021-24716

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a reference leak in the imx-lpi2c driver when pm runtime get sync fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28820

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a reference leak in the imx-lpi2c driver when pm runtime get sync fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a reference leak in the imx-lpi2c driver when pm runtime get sync fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-24826

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.16 through 5.10.36 Description: The issue is related to a reference leak in the imx-lpi2c driver when pm runtime get sync fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-28887

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.4.118 Description The issue is related to a reference leak in the imx-lpi2c driver when pm runtime get sync fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-24893

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.16 through 5.4.118 Description: The issue is related to a reference leak in the imx-lpi2c driver when pm runtime get sync fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2020-7006 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a reference leak in the i2c-imx-lpi2c component of the Linux kernel. The problem occurs when pm runtime get sync fails, causing the PM reference count to be...

Stack Buffer Overflow Vulnerability in Multiple NXP i.MX Products

The NXP i.MX 50 and others are different families of microprocessor products from NXP Semiconductors in the Netherlands. A stack buffer overflow vulnerability exists in multiple NXP i.MX products. The SDP can be used to download a small piece of code into an unprotected area of memory when the...

USN-3261-1 qemu vulnerabilities

Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. CVE-2016-10028, CVE-2016-10029 Li Qiang discovered...

Fedora 25 : 2:qemu (2017-31b976672b)

CVE-2016-7907: net: imx: infinite loop bz 1381182 - CVE-2017-5525: audio: memory leakage in ac97 bz 1414110 - CVE-2017-5526: audio: memory leakage in es1370 bz 1414210 - CVE-2016-10155 watchdog: memory leakage in i6300esb bz 1415200 - CVE-2017-5552: virtio-gpu-3d: memory leakage bz 1415283 -...

Qemu imx_fec_do_tx() function infinite loop vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An infinite loop vulnerability exists in the imxfecdotx function in QEMU, which can be exploited by an attacker with privileges to launch a DoS attack to crash QEMU...

DEBIAN-CVE-2016-7907

The imxfecdotx function in hw/net/imxfec.c in QEMU aka Quick Emulator does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via vectors involving a buffer descript...

PT-2016-7422

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the imx fec do tx function in QEMU, which does not properly limit the buffer descriptor count when transmitting packets. This allows local guest OS administrators to caus...

UBUNTU-CVE-2016-7907

The imxfecdotx function in hw/net/imxfec.c in QEMU aka Quick Emulator does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via vectors involving a buffer descript...