Lucene search
K

22 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fixed a double-free in the remove callback. The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller through devm cleanup when the device is removed. The manual...

7.8CVSS5.5AI score0.00015EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fixed DMA-API usage Use the DMA-API dmamapsingle call to obtain the DMA address of the transfer buffer, instead of using virttophys. This fixes the following DMA-API debug warning: ------------ Cut here...

5.7AI score0.00026EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/13 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-43460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/09 1:11 a.m.8 views

CVE-2026-43460

A flaw was found in the Linux kernel's rockchip-sfc driver. This vulnerability occurs because the driver attempts to unregister a Serial Peripheral Interface SPI controller twice during device removal. This double-free operation can lead to memory corruption, which may allow a local attacker to...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/08 3:31 p.m.9 views

EUVD-2026-28766

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

5.9AI score0.00015EPSS
Exploits0References4
NVD
NVD
added 2026/05/08 3:16 p.m.7 views

CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

7.8CVSS0.00015EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/05/08 3:16 p.m.6 views

CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References5
OSV
OSV
added 2026/05/08 3:16 p.m.5 views

UBUNTU-CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:22 p.m.3 views

CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

5.9AI score0.00015EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/05/08 2:22 p.m.31 views

CVE-2026-43460 spi: rockchip-sfc: Fix double-free in remove() callback

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

0.00015EPSS
Exploits0References3
CVE
CVE
added 2026/05/08 2:22 p.m.9 views

CVE-2026-43460

In the Linux kernel rockchip-sfc driver, CVE-2026-43460 is caused by a double-free of an SPI controller: the driver uses devm_spi_register_controller(), which auto-unregisters on device removal, but remove() also calls spi_unregister_controller(), creating a double-free. The mitigation implemente...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/08 2:22 p.m.4 views

CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

7.8CVSS5.8AI score0.00015EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/12/17 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-40356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This...

5.9AI score0.00026EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/16 3:30 p.m.8 views

EUVD-2025-203631

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

6.2AI score0.00026EPSS
Exploits0References3
NVD
NVD
added 2025/12/16 2:15 p.m.4 views

CVE-2025-40356

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

0.00026EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2025/12/16 2:15 p.m.0 views

CVE-2025-40356

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

5.8AI score0.00026EPSS
Exploits0References9
OSV
OSV
added 2025/12/16 2:15 p.m.2 views

UBUNTU-CVE-2025-40356

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

5.8AI score0.00026EPSS
Exploits0References10
OSV
OSV
added 2025/12/16 1:30 p.m.2 views

CVE-2025-40356 spi: rockchip-sfc: Fix DMA-API usage

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

6.5AI score0.00026EPSS
Exploits0References5
CVE
CVE
added 2025/12/16 1:30 p.m.12 views

CVE-2025-40356

In the Linux kernel, CVE-2025-40356 relates to the rockchip-sfc SPI driver. The vulnerability was addressed by replacing a DMA-API usage pattern that retrieved DMA addresses via virt_to_phys() with a proper dma_map_single() call, preventing the driver from syncing DMA memory it did not allocate. ...

6.3AI score0.00026EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/16 1:30 p.m.25 views

CVE-2025-40356 spi: rockchip-sfc: Fix DMA-API usage

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

0.00026EPSS
Exploits0References2
Rows per page
Query Builder