CVE202015808

CVE-2020-15808 CVE-2020-15808 漏洞在 STM32F4 Discovery 开发板上的概念验证利用 要求 固件版本低于 1.25.2 带有 VCP（虚拟串口）的开发板（例如 STM32F4 discovery） arm-none-eabi 工具链 复现漏洞的步骤 1. 进入 VulnerableFirmwareF4 目录并通过以下命令编译 make 忽略因未使用变量产生的警告，这些变量是确保编译器不会省略它们所必需的 2. 将 build/VulnerableFirmware.elf 烧录到设备上 3. 连接虚拟串口 4. 通过以下命令获取已连接设备的列表...

ROS-20260930-73-0029

The vulnerability of the stm32dmamuxrouteallocate function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to compromise th...

SUSE CVE-2026-90405

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

Linux Distros Unpatched Vulnerability : CVE-2026-90405

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1...

DEBIAN-CVE-2026-90405

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-90405

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-90405

CVE-2026-90405 affects the Linux kernel driver media: stm32: dcmi, specifically error handling in its probe() function. Three bugs are identified: (1) after requesting a DMA channel via dma_request_chan(), the first error path returns without cleanup; (2) error paths check dcmi->mdma_chan befo...

CVE-2026-90405 media: stm32: dcmi: fix some error handling bugs in probe()

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

EUVD-2026-82066

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-90405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mtd: rawnand: stm32fmc2: avoided overlapping mappings on the ECC buffer Overlapping mappings are now avoided by using a contiguous, non-cacheable buffer. 4.077708 DMA-API: stm32fmc2nfc 48810000.nand-controller: cacheline...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fixed the warning regarding overlapping mappings in the DMA API. Enabling the CONFIGDMAAPIDEBUGSG option results in the following warning: DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEXIST; overlapping...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe The “index” variable is used as an index into the usbphyc-phys array, which has usbphyc-nphys elements. If the “index” equals usbphyc-nphys, then it refers to an element that is out of...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: Fix for the ofiomap leak. Suggestions: - In the file drivers/regulator/stm32-pwr.c, line 166 of stm32pwrregulatorprobe: The “base” from the ofiomap function is not released when the probe function fails. - T...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32 – Fixed a refcount leak in stm32pctrlgetirqdomain. The function ofirqfindparent returns a node pointer with the refcount incremented. We should use ofnodeput on it when it is no longer necessary. Add the missing...

Linux Distros Unpatched Vulnerability : CVE-2026-89725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: stm32: prevent out-of-bounds write on RX overflow stm32rxdone appends each received CEC byte to rxmsg.msg using rxmsg.len as the write index,...

CVE-2026-89725

A flaw was found in the Linux kernel's media: cec: stm32 driver. A remote attacker can exploit an out-of-bounds write vulnerability by sending an overlong Consumer Electronics Control CEC message without an end-of-message signal. This causes the driver to write beyond an allocated buffer,...

DEBIAN-CVE-2026-89725

In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32rxdone appends each received CEC byte to rxmsg.msg using rxmsg.len as the write index, incrementing it on every RXBR receive-byte-ready interrupt without checking...

CVE-2026-89725

In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32rxdone appends each received CEC byte to rxmsg.msg using rxmsg.len as the write index, incrementing it on every RXBR receive-byte-ready interrupt without checking...

UBUNTU-CVE-2026-89725

In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32rxdone appends each received CEC byte to rxmsg.msg using rxmsg.len as the write index, incrementing it on every RXBR receive-byte-ready interrupt without checking...