God Mode On: how we attacked a vehicle’s head unit modem

Introduction Imagine you're cruising down the highway in your brand-new electric car. All of a sudden, the massive multimedia display fills with Doom, the iconic 3D shooter game. It completely replaces the navigation map or the controls menu, and you realize someone is playing it remotely right...

CVE-2025-65822

The ESP32 system on a chip SoC that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be...

CVE-2025-65829

The ESP32 system on a chip SoC that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved ...

CVE-2023-53866

CVE-2023-53866 - Linux kernel (ASoC: soc-compress) impact and fix Affected software: Linux kernel ASoC subsystem, specifically the soc-compress path used for DPCM (dynamic PCM) processing. Root cause: Functions such as dpcm_be_connect, dpcm_be_disconnect, snd_soc_runtime_action, and dpcm_dapm_str...

CVE-2023-53866 ASoC: soc-compress: Reposition and add pcm_mutex

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcmmutex If paniconwarn is set and compress streamDPCM is started, then kernel panic occurred because card-pcmmutex isn't held appropriately. In the following functions, warning were issued ...

Linux Distros Unpatched Vulnerability : CVE-2023-53866

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: soc-compress: Reposition and add pcmmutex If paniconwarn is set and compress streamDPCM is started, then kernel panic occurred because card-pcmmutex isn'...

The vulnerability of the dapm_widget_list_create() function in the sound module/soc/soc-dapm.c file, which is part of the Linux operating system’s SoC audio support, allows a hacker to cause a service failure.

The vulnerability of the dapmwidgetlistcreate function in the sound/soc/soc-dapm.c module of the Linux operating system’s sound support module is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-33187

CVE-2025-33187 affects NVIDIA DGX Spark GB10, with a vulnerability in the SROOT component that could allow an attacker with local, low-privilege access to reach SoC protected areas. Exploitation could lead to code execution, information disclosure, data tampering, denial of service, or privilege ...

CVE-2025-33187

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...

CVE-2025-33187

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...

NVIDIA DGX Spark 安全漏洞

The NVIDIA DGX Spark is a personal AI computer from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX Spark GB10, which originates from privileged access to an accessible SoC protected area in SROOT, and could result in code execution, information disclosure, data tampering, denia...

PT-2025-48048

Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark GB10 Description The NVIDIA DGX Spark GB10 contains a flaw in the SROOT component. An attacker with privileged access could potentially gain access to System on a Chip SoC protected areas. A successful exploit may lead to code...

CVE-2025-48507

The security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC...

PT-2025-47854

The Secure Flag passed to Versal™ Adaptive SoC’s Arm® Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they...

ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

...

USN-7835-6: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

Intel SoC Thermal IPF Extension Provider Software Advisory - Lenovo Support US

No description provided...

Intel® SoC Thermal IPF Extension Provider Software Advisory

Summary: A potential security vulnerability in some SoC Thermal Innovation Platform Framework Extension Provider Intel® SoC Thermal IPF Extension Provider software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Detail...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989530 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix Null-point-dereference in fmtsinglename Check the return value of devmkstrdup in...

USN-7835-4: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...