kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl

A NULL pointer dereference flaw was found in the Linux kernel’s Bluetooth HCI UART driver. This flaw allows a local user to crash the system...

PT-2025-38184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Bluetooth handling. Specifically, a NULL pointer dereference can occur in the hci uart tty close function due to a failure in percpu init rwse...

ASUS RT-N12+ B1 Elevation of Privilege Vulnerability

The ASUS RT-N12+ B1 is a wireless router. An elevation of privilege vulnerability exists in the ASUS RT-N12+ B1, which can be exploited by an attacker to bypass security restrictions caused by incorrect access control and gain root terminal access via the UART interface by sending a specially...

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

CVE-2024-28326

The ASUS RT-N12+ B1 and RT-N12 D1 wireless routers are vulnerable to an Incorrect Access Control flaw in their firmware. This vulnerability allows a local attacker to bypass security restrictions and obtain root terminal access by interacting with the UART interface , potentially through the tran...

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

CVE-2024-28326: Improper Physical Access Control

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

PT-2024-8487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL-pointer dereference in the Linux kernel's Bluetooth qca component. Qualcomm ROME controllers can be registered from the Bluetooth line discipline, and in...

DEBIAN-CVE-2024-26890

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtekdata'. If btrtl driver is used with btusb, then memory for private hci data is...

PT-2024-41622

Уязвимость функции cros ec uart probe модуля drivers/platform/chrome/cros ec uart.c поддержки платформы оборудования Chrome OS ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2024-29182

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock in the Linux kernel's serial component, specifically in the imx uart console write function. By introducing a timeout when waiting for the...

PT-2024-26817

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition in the Linux kernel's cros ec uart probe function can trigger a NULL pointer dereference. This occurs when devm serdev device open is called before serdev device set...

PT-2024-7828

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The vulnerability is related to the serial component of the Linux kernel, specifically with the uart handle cts change function in serial core, which expects the caller to hold uport-lock. The...

CVE-2023-48426

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data

u-boot bug that allows for u-boot shell and interrupt over UART...

CVE-2023-48426

CVE-2023-48426 affects u-boot and is tied to a buffer overflow in memory that allows access to the u-boot shell and triggering interrupts over UART. The practical impact described across sources is the potential to bypass secure boot mechanisms. Affected component: u-boot (bootloader). Exact vuln...