CVE-2025-21916: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix a flaw in existing endpoint checks Syzbot once again identified a flaw in usb endpoint checking, see 1. This time the issue stems from a commit authored by me 2eabb655a968 "usb: atm: cxacru: fix endpoint...

Linux kernel I2C STM32F7 Buffer Overflow

The vulnerability of the stm32f7i2cxfer function in the drivers/i2c/busses/i2c-stm32f7.c module of the operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...

CVE-2022-48836 Input: aiptek - properly check endpoint type

In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usbsubmiturb which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint. Fix it by replacing old...

CVE-2023-52791

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption e.g. in waitforcompletion while waiting for the DMA...

CVE-2023-52791

CVE-2023-52791 affects the Linux kernel i2c core: Run atomic i2c xfer when !preemptible to ensure atomicity during restart sequences, preventing voluntary context switches within RCU read-side critical sections. The fix, tied to preemption handling (switching to !preemptible()), aligns with pre-v...

CVE-2023-52791

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption e.g. in waitforcompletion while waiting for the DMA...

CVE-2023-52791: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption e.g. in waitforcompletion while waiting for the DMA...

PT-2024-5782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the i2c hid xfer function in the i2c-hid component of the Linux kernel. The problem arises when the I2C HID READ PENDING flag is set and an interrupt occurs,...

SUSE CVE-2021-47051

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: Fix PM reference leak in lpspipreparexferhardware pmruntimegetsync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. Fix it by replacing it with...

Unbreakable Enterprise kernel security update

5.15.0-203.146.5.1 - Revert 'selftests/bpf: Test tail call counting with bpf2bpf and data on stack' Samasth Norway Ananda Orabug: 36277693 - Revert 'tcp: fix excessive TLP and RACK timeouts from HZ rounding' Sherry Yang Orabug: 36277684 5.15.0-203.146.5 - i2c: core: Fix atomic xfer check for...

PT-2024-14736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue in the amdgpu dm i2c xfer function has been resolved. The issue occurs when ddc service construct is called and it checks the link type and whether there...

PT-2023-24836

Name of the Vulnerable Software and Affected Versions peplink Surf SOHO HW1 version 6.3.5 Description An OS command injection issue exists in the data.cgi xfer dns functionality. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to...

PT-2023-9432

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.4 Description The issue is related to a null pointer dereference in the af9035 i2c master xfer function. In this function, msg is controlled by the user, and when msgi.buf is null and msgi.len is zero, former...

PT-2025-37661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The az6007 i2c xfer function is susceptible to a null pointer dereference. This occurs when the msg parameter, controlled by the user, has a null buffer msgi.buf and a length of zero...

PT-2023-36574

Уязвимость функции af9005 i2c xfer модуля drivers/media/usb/dvb-usb/af9005.c драйвера мультимедийных устройств USB ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-33834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A potential security issue exists due to a null pointer dereference in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2023-34234

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A null pointer dereference issue exists in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-34703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 4.9.336 Description A null pointer dereference issue exists in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A null pointer dereference issue exists in the az6027 i2c xfer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-6434

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dvb-usb/az6027.c. The issue arises because messages from user space are not properly checked before...