CVE-2026-89172

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172

Microchip AN1044, AN953, and SW300052 cryptographic algorithms are subject to an improper protection of physical side channels vulnerability. Affected versions: AN1044 through A, AN953 through A, and SW300052 through 2.6. The attack requires physical access with high complexity and specific attac...

CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

EUVD-2026-76846

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

Symmetricom SyncServer Unauthenticated - Remote Command Execution

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. id: CVE-2022-40022 info: name: Symmetricom SyncServer Unauthenticated - Remote Command Execution author: DhiyaneshDK,mielverkerken severity: critical description: | Microchip Technology...

The vulnerability of the lan966x_fdma_reload() function in the drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c file of the Ethernet microchip Linux kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lan966xfdmareload function in the drivers/net/ethernet/microchip/lan966x/lan966xfdma.c file of the Ethernet microchip Linux kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-18349

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349

CVE-2026-18349 is an improper protection against voltage and clock glitches vulnerability in the Microchip SAMA5D4 that enables Hardware Fault Injection . The CVSS 4.0 score is 7.3 (HIGH) , with a physical attack vector and high attack complexity , but all impact metrics (confidentiality, integri...

CVE-2026-18349 SAMA5D44 Fault Injection Vulnerability

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Net: DSA: Microchip: Kszcommon: Fixed the refcount leak bug. In kszswitchregister, we should call ofnodeput for the reference returned by ofgetchildbyname, which has increased the refcount...

PT-2026-80913

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-72340

A flaw was found in the Linux kernel's Microchip VCAP driver. A race condition exists in the shared Super VCAP block, where independent locking of VCAP instances can lead to concurrent access issues. A local attacker with the ability to trigger concurrent operations, such as a full rule dump in...

CVE-2026-72156

A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...

Linux Distros Unpatched Vulnerability : CVE-2026-72156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When...

CVE-2026-72340

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...

UBUNTU-CVE-2026-72340

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...

CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

UBUNTU-CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

EUVD-2026-59239

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...