CVE-2026-64149

In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dmamapresource sanity check into debug code dmamapresource uses pfnvalid to ensure the range is not RAM. However, pfnvalid only checks for availability of the memory map for a PFN but it does not ensure that the...

PT-2026-61466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the dma map resource function where a sanity check using pfn valid incorrectly identifies certain Memory-Mapped I/O MMIO addresses as RAM. On ARM64 systems using...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988988 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi: bcm2835:...

Linux Distros Unpatched Vulnerability : CVE-2021-47282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi:...

DEBIAN-CVE-2022-49569

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers In case a IRQ based transfer times out the bcm2835spihandleerr function is called. Since commit 1513ceee70f2 "spi: bcm2835: Drop dmapending flag" the...

PT-2025-8502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, specifically in the spi: bcm2835 module. The bcm2835 spi handle err function is called when an IRQ based transfer times out. Due to chang...

SUSE CVE-2021-47282

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 "spi: bcm2835: Cache CS register value for -preparemessage" limited the number of slaves to 3 at compile-time. The limitation was necessitated by ...

DEBIAN-CVE-2021-47282

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 "spi: bcm2835: Cache CS register value for -preparemessage" limited the number of slaves to 3 at compile-time. The limitation was necessitated by ...

PT-2021-25488

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v5.12.10 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. This problem was introduced in version v5.4 and is fixed in Linux Kernel version...

PT-2021-29356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.12.10 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. This problem was introduced in version v5.4 and is fixed in Linux Kernel version v5.12.11...

PT-2021-29409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25415

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns an out-of-bounds access with more than 4 slaves in the spi: bcm2835 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...