Lucene search
+L

32 matches found

RedhatCVE
RedhatCVE
•added 2026/08/31 10:04 a.m.•16 views

CVE-2026-80712

A flaw was found in the Linux kernel's spi-qpic-snand driver. This vulnerability arises from an incorrect timing issue where the SETFEATURE command for SPI-NAND flash devices is executed before the intended feature value is properly written. Consequently, the device is programmed with an outdated...

8.4CVSS5.9AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-80712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which...

8.4CVSS6AI score0.00194EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/28 4:33 p.m.•17 views

SUSE CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6.2AI score0.00194EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/28 8:16 a.m.•24 views

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS0.00194EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/08/28 8:16 a.m.•18 views

UBUNTU-CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6.5AI score0.00194EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•26 views

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6.2AI score0.00194EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/08/28 6:53 a.m.•26 views

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6.5AI score0.00194EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/08/28 6:53 a.m.•50 views

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS0.00194EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/28 6:53 a.m.•17 views

EUVD-2026-67447

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

6.2AI score0.00194EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/28 6:53 a.m.•50 views

CVE-2026-80712

This vulnerability affects the Linux kernel's spi-qpic-snand driver (Qualcomm QPIC SPI-NAND controller). The root cause is an off-by-one in SET_FEATURE command handling : qcom_spi_send_cmdaddr() submits and executes the command immediately, but the feature value is only written to NAND_FLASH_FEAT...

8.4CVSS6.2AI score0.00194EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/08/28 6:53 a.m.•20 views

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6.1AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•11 views

CVE-2026-80712: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6.2AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•24 views

PT-2026-83012

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18 Description An issue exists in the spi-qpic-snand driver where the qcom spi send cmdaddr function programs NAND FLASH CMD/NAND EXEC CMD and submits descriptors, causing the controller to execute the command...

8.4CVSS6.3AI score0.00194EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
•added 2025/10/28 12:00 a.m.•15 views

spi-qpic-snand DoS

The vulnerability of the spi-qpic-snand component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.4AI score0.00149EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/08 1:32 a.m.•19 views

EUVD-2025-31858

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

7.5CVSS7.2AI score0.0052EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-39893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host...

5.5CVSS6.3AI score0.00127EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/02 11:13 a.m.•11 views

CVE-2025-39893

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remains registered both when the spiregistercontroller function returns with an error and also on device removal. Change...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References4
NVD
NVD
•added 2025/10/01 8:15 a.m.•16 views

CVE-2025-39893

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remains registered both when the spiregistercontroller function returns with an error and also on device removal. Change...

5.5CVSS0.00127EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/10/01 8:15 a.m.•21 views

UBUNTU-CVE-2025-39893

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remains registered both when the spiregistercontroller function returns with an error and also on device removal. Change...

5.5CVSS5.7AI score0.00127EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/10/01 7:42 a.m.•29 views

CVE-2025-39893

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remains registered both when the spiregistercontroller function returns with an error and also on device removal. Change...

5.5CVSS6.3AI score0.00127EPSS
SaveExploits0
Rows per page
Query Builder