UBUNTU-CVE-2022-49466

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: Fix refcount leak in scmiregulatorprobe offindnodebyname returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49466 regulator: scmi: Fix refcount leak in scmi_regulator_probe

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: Fix refcount leak in scmiregulatorprobe offindnodebyname returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49466 regulator: scmi: Fix refcount leak in scmi_regulator_probe

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: Fix refcount leak in scmiregulatorprobe offindnodebyname returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49466 regulator: scmi: Fix refcount leak in scmi_regulator_probe

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: Fix refcount leak in scmiregulatorprobe offindnodebyname returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49451

CVE-2022-49451 affects the Linux kernel firmware: arm_scmi, base protocol enumeration. The vulnerability stems from improper validation when enumerating SCMI protocols with BASE_DISCOVER_LIST_PROTOCOLS: the check used a sum of unsigned integers that could overflow, allowing bypass of the check if...

CVE-2022-49451 firmware: arm_scmi: Fix list protocols enumeration in the base protocol

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...

CVE-2022-49451 firmware: arm_scmi: Fix list protocols enumeration in the base protocol

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...

CVE-2022-49451 firmware: arm_scmi: Fix list protocols enumeration in the base protocol

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...

CVE-2022-49451

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a missing ofnodeput call in the scmiregulatorprobe function, resulting in a reference count leak...

USN-7276-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: armscmi: Fixed a double-free operation in the OPTEE transport. Channels can be shared between protocols; avoiding the need to free the same descriptor twice when unloading the stack...

CVE-2024-11864

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP...

CVE-2024-11863

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP...

CVE-2024-11863

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP...

CVE-2024-11864

CVE-2024-11864 affects ARM SCP-Firmware up to version 2.15.0. Specifically crafted SCMI messages sent to an SCP can trigger a Usage Fault, causing the SCP to crash. Connected sources consistently describe the impact as a crash due to SCMI message handling; no exploitable code paths or vectors are...

CVE-2024-11864 SCP-Firmware Vulnerability

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP...

CVE-2024-11864 SCP-Firmware Vulnerability

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP...

CVE-2024-11863 SCP-Firmware Vulnerability

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP...

CVE-2024-11863

CVE-2024-11863 and CVE-2024-11864 describe a vulnerability in ARM SCP-Firmware where specially crafted SCMI messages sent to an SCP running firmware versions up to and including 2.15.0 can trigger a Usage Fault, crashing the SCP. The affected component is the SCP-Firmware stack; the root cause ci...