Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18

Количество 18

ubuntu логотип

CVE-2024-36965

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2024-36965

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2024-36965

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2024-36965

около 2 лет назад

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2024-36965

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: r ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-mh75-cw6c-vrcq

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2024-04589

больше 2 лет назад

Уязвимость функции scp_ipi_init() драйвера сопроцессоров ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20240816-12

около 2 лет назад

Множественные уязвимости kernel-lt

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2024-10855

больше 2 лет назад

ALT-PU-2024-10855: package `kernel-image-pine` update to version 6.10.3-alt2

CVSS3: 8.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2394-1

больше 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2372-1

больше 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2571-1

больше 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2024-9127

больше 2 лет назад

ALT-PU-2024-9127: package `kernel-image-un-def` update to version 6.1.94-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2896-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2939-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2024-13979

около 2 лет назад

ALT-PU-2024-13979: package `kernel-image-rpi-un` update to version 6.6.56-alt1

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2973-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2024-14046

почти 2 года назад

ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-36965

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2024-36965

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2024-36965

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
msrc логотип
CVSS3: 5.5
0%
Низкий
около 2 лет назад
debian логотип
CVE-2024-36965

In the Linux kernel, the following vulnerability has been resolved: r ...

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
github логотип
GHSA-mh75-cw6c-vrcq

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2024-04589

Уязвимость функции scp_ipi_init() драйвера сопроцессоров ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
redos логотип
ROS-20240816-12

Множественные уязвимости kernel-lt

CVSS3: 9.8
около 2 лет назад
altlinux логотип
ALT-PU-2024-10855

ALT-PU-2024-10855: package `kernel-image-pine` update to version 6.10.3-alt2

CVSS3: 8.1
больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2394-1

Security update for the Linux Kernel

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2372-1

Security update for the Linux Kernel

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2571-1

Security update for the Linux Kernel

больше 2 лет назад
altlinux логотип
ALT-PU-2024-9127

ALT-PU-2024-9127: package `kernel-image-un-def` update to version 6.1.94-alt1

CVSS3: 9.8
больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2896-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2939-1

Security update for the Linux Kernel

около 2 лет назад
altlinux логотип
ALT-PU-2024-13979

ALT-PU-2024-13979: package `kernel-image-rpi-un` update to version 6.6.56-alt1

CVSS3: 7.8
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2973-1

Security update for the Linux Kernel

около 2 лет назад
altlinux логотип
ALT-PU-2024-14046

ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1

CVSS3: 9.8
почти 2 года назад

Уязвимостей на страницу