CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2023-31325

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...

CVE-2023-31325

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...

CVE-2023-31325

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...

CVE-2023-31325

CVE-2023-31325 describes an improper isolation of shared resources on a System-on-a-Chip (SOC) that could allow a privileged attacker to tamper with the PSP-reserved DRAM region, potentially compromising confidentiality and integrity. Connected sources indicate this affects AMD client processor p...

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

...

PT-2025-36396

Name of the Vulnerable Software and Affected Versions: TEE SOC Driver affected versions not specified Description: Insufficient parameter sanitization in the TEE SOC Driver could allow an attacker to issue a malformed DRV SOC CMD ID SRIOV SPATIAL PART command, potentially leading to read or write...

PT-2025-36379

Name of the Vulnerable Software and Affected Versions: System-on-a-chip SOC affected versions not specified Description: Improper isolation of shared resources on a System-on-a-chip SOC could allow a privileged attacker to tamper with the contents of the PSP reserved DRAM region, potentially...

soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled

...

soc: qcom: pdr: protect locator_addr with the main mutex

...

reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC

...

ASoC: Intel: avs: Verify content returned by parse_int_array()

...

USN-7649-1 linux, linux-gcp, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PA-RISC architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; -...

Security Enclave Architecture for Heterogeneous Security Primitives for Supply-Chain Attacks

Designing secure architectures for system-on-chip SoC platforms is a highly intricate and time-intensive task, often requiring months of development and meticulous verification. Even minor architectural oversights can lead to critical vulnerabilities that undermine the security of the entire chip...

IThermTroj: Exploiting Intermittent Thermal Trojans in Multi-Processor System-On-Chips

Thermal Trojan attacks present a pressing concern for the security and reliability of System-on-Chips SoCs, especially in mobile applications. The situation becomes more complicated when such attacks are more evasive and operate sporadically to stay hidden from detection mechanisms. In this paper...

The vulnerability of the soc-topology.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the soc-topology.c component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-5834

Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Although authentication is required to exploit this...

CVE-2025-5834

Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Although authentication is required to exploit this...

CVE-2025-5834

The CVE-2025-5834 entry concerns Pioneer DMH-WT7600NEX, where a missing immutable root of trust in the hardware SoC enables local privilege escalation. The flaw stems from improper hardware root-of-trust configuration, allowing a local attacker to bypass authentication and escalate privileges to ...

SV-LLM: an Agentic Approach for SoC Security Verification Using Large Language Models

Ensuring the security of complex system-on-chips SoCs designs is a critical imperative, yet traditional verification techniques struggle to keep pace due to significant challenges in automation, scalability, comprehensiveness, and adaptability. The advent of large language models LLMs, with their...