232 matches found
SUSE CVE-2025-38081
In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select stuff for GPIO chip selects. GPIOs can be numbered much higher than native CS. Also, it makes no sense...
CVE-2025-37896 spi: spi-mem: Add fix to avoid divide error
In the Linux kernel, the following vulnerability has been resolved: spi: spi-mem: Add fix to avoid divide error For some SPI flash memory operations, dummy bytes are not mandatory. For example, in Winbond SPINAND flash memory devices, the writecache and updatecache operation variants have zero...
AZL-62495 CVE-2025-37842 affecting package kernel for versions less than 6.6.112.1-2
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called first during device detach and trigger kern...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle device separation in spi: fsl-qspi could cause the kernel to crash...
SUSE CVE-2023-53106
In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlcremove due to race condition This bug influences both stncii2cremove and stncispiremove. Take stncii2cremove as an example. In stncii2cprobe, it called ndlcprobe and bound &ndlc-smwork...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling low SPI frequencies, which could lead to out-of-bounds access to arrays...
spi: sn-f-ospi: Fix division by zero
...
SUSE CVE-2022-49173
In the Linux kernel, the following vulnerability has been resolved: spi: fsi: Implement a timeout for polling status The data transfer routines must poll the status register to determine when more data can be shifted in or out. If the hardware gets into a bad state, these polling loops may never...
SUSE CVE-2022-49475
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname It will cause null-ptr-deref if platformgetresourcebyname returns NULL, we need check the return value...
CVE-2022-49475 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname It will cause null-ptr-deref if platformgetresourcebyname returns NULL, we need check the return value...
The vulnerability of the spi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the spi component in the Linux operating system’s kernel is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
...
The vulnerability of the spi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the spi component in the Linux operating system’s kernel is related to the disclosure of information in error messages. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the spi: mpc52xx module being removed without first canceling the work item, which could lead to a...
The vulnerability of the dev_get_drvdata() function in the Cadence Quad SPI driver (drivers/spi/spi-cadence-quadspi.c) in the Linux operating system allows a hacker to cause a system failure.
The vulnerability of the devgetdrvdata function in the Cadence Quad SPI driver drivers/spi/spi-cadence-quadspi.c in Linux kernel is related to the use of an unreliable pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
kernel: spi: Fix null dereference on suspend
In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous noqueue transfer can be active during a system suspend. This can cause a null pointer dereference exception to occur when the system resumes. Exampl...
The vulnerability of the spi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the spi component of the Linux operating system’s kernel is related to a memory corruption in the regmapgetspibus function. Exploiting this vulnerability can allow an attacker to cause a system failure...
kernel: spi: Fix null dereference on suspend
In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous noqueue transfer can be active during a system suspend. This can cause a null pointer dereference exception to occur when the system resumes. Exampl...
CVE-2024-50224 spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add check for the return value of spigetcsgpiod to avoid passing a NULL pointer to gpioddirectionoutput, preventing a crash when GPIO chip select is not used. Fix below...