AZL-25319 CVE-2023-23000 affecting package kernel for versions less than 5.15.135.1-2

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegraxusbfindportnode return value. Callers expect NULL in the error case, but an error pointer is used...

DEBIAN-CVE-2023-23000

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegraxusbfindportnode return value. Callers expect NULL in the error case, but an error pointer is used...

UBUNTU-CVE-2023-23000

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegraxusbfindportnode return value. Callers expect NULL in the error case, but an error pointer is used...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in the Linux kernel prior to version 5.17, which stems from the drivers/phy/tegra/xusb.c file incorrectly handling the return value of...

SUSE CVE-2021-34402

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or...

SUSE CVE-2021-34406

NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot...

GSD-2023-1001924 dmaengine: tegra: Fix memory leak in terminate_all()

dmaengine: tegra: Fix memory leak in terminateall This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

PT-2023-35000 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.1.8 Description: A memory leak issue was discovered in the terminate all function of the dmaengine: tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

GSD-2023-1001277 staging: media: tegra-video: fix device_node use after free

staging: media: tegra-video: fix devicenode use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000917 staging: media: tegra-video: fix device_node use after free

staging: media: tegra-video: fix devicenode use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000465 staging: media: tegra-video: fix device_node use after free

staging: media: tegra-video: fix devicenode use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a use-after-free error in the tegra-video component of the Linux Kernel. This error was introduced in version v5.10 and is fixed in version v6.0.18. The actual impact...

GSD-2022-1007517 clk: tegra: Fix refcount leak in tegra210_clock_init

clk: tegra: Fix refcount leak in tegra210clockinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007274 clk: tegra: Fix refcount leak in tegra114_clock_init

clk: tegra: Fix refcount leak in tegra114clockinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1005784 irqchip/tegra: Fix overflow implicit truncation warnings

irqchip/tegra: Fix overflow implicit truncation warnings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

PT-2022-33750 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33903 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a use-after-free UAF bug in the tegra slink remove function. This bug was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.61. The actual impac...

PT-2022-34228 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34476 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-34562 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...