Symmetricom SyncServer Unauthenticated - Remote Command Execution

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. id: CVE-2022-40022 info: name: Symmetricom SyncServer Unauthenticated - Remote Command Execution author: DhiyaneshDK,mielverkerken severity: critical description: | Microchip Technology...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: kszcommon: Fixed the refcount leak bug. In kszswitchregister, we should call ofnodeput for the reference returned by ofgetchildbyname, which has increased the refcount...

CVE-2026-89172

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172

Microchip AN1044, AN953, and SW300052 cryptographic algorithms are subject to an improper protection of physical side channels vulnerability. Affected versions: AN1044 through A, AN953 through A, and SW300052 through 2.6. The attack requires physical access with high complexity and specific attac...

CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

EUVD-2026-76846

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

PT-2026-90634

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

CVE-2026-89172: Improper Protection of Physical Side Channels

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6...

The vulnerability of the Microchip SAMA5D4 microcontroller lies in its improper protection against voltage spikes and clock frequency fluctuations, allowing attackers to execute arbitrary code.

The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the mchp_coreqspi_transfer_one() function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

The vulnerability of the ksz_ptp_msg_irq_setup() function in the drivers/net/dsa/microchip/ksz_ptp.c module of the DSA kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kszptpmsgirqsetup function in the drivers/net/dsa/microchip/kszptp.c module of the DSA kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the lan966x_fdma_reload() function in the drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c file of the Ethernet microchip Linux kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lan966xfdmareload function in the drivers/net/ethernet/microchip/lan966x/lan966xfdma.c file of the Ethernet microchip Linux kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-18349

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349 SAMA5D44 Fault Injection Vulnerability

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349

CVE-2026-18349 is an improper protection against voltage and clock glitches vulnerability in the Microchip SAMA5D4 that enables Hardware Fault Injection . The CVSS 4.0 score is 7.3 (HIGH) , with a physical attack vector and high attack complexity , but all impact metrics (confidentiality, integri...

CVE-2026-18349 SAMA5D44 Fault Injection Vulnerability

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent; however, they are locked independently. On sparx5 and lan969x, the IS0 and IS2 instances are backed by the same Supe...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fpga: microchip-spi: fixed the issue where zero value of headersize was read during mpfopsParseHeader. In this function, headersize is read from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression...