zynqmp_qspi_exec_op Heap Buffer Overflow DoS

Vulnerability of the zynqmpqspiexecop function in the drivers/spi/spi-zynqmp-gqspi.c module – The drivers for SPI devices in the Linux operating system involve reusing previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2021-47048

In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmpqspiexecop When handling op-addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store...

DEBIAN-CVE-2021-47048

In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmpqspiexecop When handling op-addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store...

PT-2021-24848

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.10.36 Description: The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attac...

PT-2021-28842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.36 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attack...

PT-2021-24751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in Linux Kernel version v5.12.4. The actual impact...

PT-2021-28745

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...