PT-2024-8441 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the regmap component in the Linux kernel, specifically with the spi module. The max raw read and max raw write limits in the regmap spi struct do not account fo...

GSD-2022-1004661 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers

spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by comm...

GSD-2022-1004515 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers

spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by...

GSD-2022-1004327 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers

spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by comm...

GSD-2022-1004101 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers

spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by comm...

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

Design/Logic Flaw

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

PT-2022-21213 · Ampere · Ampere Altra Max +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra and AltraMax devices before SRP 1.09 Description: The Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component. Recommendations: For Ampere Altra and AltraMax devices before SRP 1.0...

GSD-2022-1003615 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commi...

GSD-2022-1003401 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003109 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002757 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

CVE-2021-26317

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution...

Code injection

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution...

CVE-2021-26317

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution...

CVE-2021-26317

CVE-2021-26317: The AMD SMM protocol verification failure allows an attacker to take control of the SMM protocol and modify SPI flash, potentially enabling arbitrary code execution. Public documentation ties this to AMD’s SMM/ASP/SEV family and lists it among AMD client vulnerabilities with a hig...

CVE-2021-26347

Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service...

Integer overflow

Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service...