PT-2026-70994

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llext link plt subsys/llext/llext link.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch...

PT-2026-58036

Name of the Vulnerable Software and Affected Versions Zephyr OS versions 3.7.0 through 4.4.0 Description On Xtensa SoCs configured with CONFIG XTENSA MPU and CONFIG USERSPACE, the arch buffer validate function in arch/xtensa/core/mpu.c incorrectly permits access to memory when a buffer's rounded...

USN-8029-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8048-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8048-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

USN-8048-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

USN-8048-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

Ubuntu 25.10 : Linux kernel (GCP) vulnerabilities (USN-8030-1)

The remote Ubuntu 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8030-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the...

USN-8030-1 linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

USN-8029-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

Constant Time Issue with Xtensa-based ESP32 and X22519

...

UBUNTU-CVE-2025-12888

Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of...

EUVD-2025-198523

Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of...

xtensa: simdisk: add input size check in proc_write_simdisk

...

CVE-2022-49682 xtensa: Fix refcount leak bug in time.c

In the Linux kernel, the following vulnerability has been resolved: xtensa: Fix refcount leak bug in time.c In calibrateccount, offindcompatiblenode will return a node pointer with refcount incremented. We should use ofnodeput when it is not used anymore...

PT-2022-33198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.321 Description A refcount leak bug was discovered in the time.c file of the xtensa architecture in the Linux Kernel. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-32885

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description A refcount leak bug was discovered in the setup of xtfpga in the xtensa architecture. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2022-32512

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description A refcount leak bug was discovered in the time.c file of the xtensa architecture in the Linux Kernel. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-32721

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description A refcount leak bug was discovered in the setup of xtfpga in the xtensa architecture. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Lin...

PT-2022-33150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.286 Description A refcount leak bug was discovered in the setup of xtfpga in the xtensa architecture. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2019:2780-1)

This update for binutils fixes the following issues : binutils was updated to current 2.32 branch jscECO-368. Includes following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory access exists in...