Lucene search
+L

10 matches found

AstraLinux
AstraLinux
•added 2026/06/24 3:11 p.m.•15 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fixed the lock inversion between spilock and buflock. The spidev driver previously used two mutexes, spilock and buflock, but their acquisition was done in different orders depending on the code path: - write/read:...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/08 2:16 p.m.•23 views

CVE-2026-43319

In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spilock and buflock The spidev driver previously used two mutexes, spilock and buflock, but acquired them in different orders depending on the code path: write/read: buflock - spilock ioctl...

5.5CVSS0.00125EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/08 2:16 p.m.•26 views

UBUNTU-CVE-2026-43319

In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spilock and buflock The spidev driver previously used two mutexes, spilock and buflock, but acquired them in different orders depending on the code path: write/read: buflock - spilock ioctl...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References19
OSV
OSV
•added 2026/05/08 1:26 p.m.•12 views

CVE-2026-43319 spi: spidev: fix lock inversion between spi_lock and buf_lock

In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spilock and buflock The spidev driver previously used two mutexes, spilock and buflock, but acquired them in different orders depending on the code path: write/read: buflock - spilock ioctl...

6AI score
SaveExploits0References8
CVE
CVE
•added 2026/05/08 1:26 p.m.•50 views

CVE-2026-43319

CVE-2026-43319 affects the Linux kernel spidev driver. The vulnerability stemmed from inverted lock ordering between spi_lock and buf_lock across code paths (write/read use buf_lock then spi_lock; ioctl uses spi_lock then buf_lock), enabling potential deadlocks in multi-threaded access. The fix u...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/05/08 12:00 a.m.•30 views

Linux Distros Unpatched Vulnerability : CVE-2026-43319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spidev: fix lock inversion between spilock and buflock The spidev driver previously used two mutexes, spilock and buflock, but acquired them in different...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•25 views

PT-2026-38970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock inversion exists in the spidev driver involving two mutexes, spi lock and buf lock. These locks were acquired in different orders depending on the execution path: write and read...

9.8CVSS5.7AI score0.00125EPSS
SaveExploits0
Lenovo
Lenovo
•added 2024/06/11 5:54 p.m.•11 views

AMD SPI Lock Bypass Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2024/06/11 12:00 a.m.•83 views

AMD SPI Lock Bypass June 2024 Security Update

AMD has informed HP of a potential weakness in AMD SPI protection features, which might allow arbitrary code execution. AMD is releasing firmware updates and HP is enabling AMD ROM Armor to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. HP has...

8.2CVSS8AI score0.00197EPSS
SaveExploits0Affected Software93
HPE Security Bulletins
HPE Security Bulletins
•added 2024/06/11 12:00 a.m.•22 views

HPESBHF04638 rev.1 - Certain HPE ProLiant Servers Using Certain AMD EPYC Processors, AMD-SB-1041: SPI Lock Bypass, Local Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.1005-16-2024 HPE ProLiant DL325 Gen10 Plus v2 server - Prior to v3.1005-16-2024 HPE ProLiant DL345 Gen10 Plus server - Prio...

8.2CVSS6.1AI score0.00197EPSS
SaveExploits0
Rows per page
Query Builder