CVE-2026-98825

A flaw was found in the Linux kernel's Microchip PolarFire Real-Time Clock RTC driver. During device probing or driver initialization, this flaw can lead to a Denial of Service DoS through a kernel crash. The driver fails to verify whether acquiring the reference clock returned an error before...

CVE-2026-98795

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When operating on devices where Precision Time Protocol PTP initialization is skipped, the driver does not check if PTP was initialized before executing its deinitialization routines. A local privileged user could trigger thi...

CVE-2026-98908

The Linux kernel contains a vulnerability in the microchip sparx5 network driver where the sparx5_tc_flower_psfp_setup() function fails to release PSFP resources (stream gate, flow meter, and stream filter) if a subsequent setup step fails. Additionally, a logic error in sparx5_psfp_fm_add() coul...

CVE-2026-98908 net: microchip: sparx5: clean up PSFP resources on flower setup failure

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

CVE-2026-98908

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

Symmetricom SyncServer Unauthenticated - Remote Command Execution

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. id: CVE-2022-40022 info: name: Symmetricom SyncServer Unauthenticated - Remote Command Execution author: DhiyaneshDK,mielverkerken severity: critical description: | Microchip Technology...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fixed an out-of-bounds access during output registration. UBSAN reported an out-of-bounds access during the registration of the last two outputs. This out-of-bounds access occurs because space is only...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fpga: microchip-spi: fixed the issue where zero headersize OOB read was performed in mpfopsParseHeader. The mpfopsParseHeader function reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: kszcommon: Fixed the refcount leak bug. In kszswitchregister, we should call ofnodeput for the reference returned by ofgetchildbyname, which has increased the refcount...

CVE-2026-89172

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

EUVD-2026-76846

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172

Microchip AN1044, AN953, and SW300052 cryptographic algorithms are subject to an improper protection of physical side channels vulnerability. Affected versions: AN1044 through A, AN953 through A, and SW300052 through 2.6. The attack requires physical access with high complexity and specific attac...

PT-2026-90634

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172: Improper Protection of Physical Side Channels

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

Microchip SAMA5D4 Voltage Spike Code Execution

The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux SPI Buffer Overflow DoS

The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

DSA Kernel ksz_ptp_msg_irq_setup() Buffer Overflow

The vulnerability of the kszptpmsgirqsetup function in the drivers/net/dsa/microchip/kszptp.c module of the DSA kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...