In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use it for spi_read() instead of a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we just use a u8[] instead of __be16 and __be32 and change the conversion functions appropriately.
Update Linux/Linux to b3bb8faeca1a2ef7be95ee8a512b639f9ffce947; Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP to *; Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP to *; Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP to *; Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP to *; Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to *; Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to * if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scaniio: adc: ti-adc161s626: use DMA-safe memory for spi_read() affects Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic), Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (generic). Severity is high. In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use it for spi_read() instead of a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we just use a u8[] instead of __be16 and __be32 and change the conversion functions appropriately.
AI coding agents often install or upgrade packages automatically in generic. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use it for spi_read() instead of a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we just use a u8[] instead of __be16 and __be32 and change the conversion functions appropriately.
Update Linux/Linux to b3bb8faeca1a2ef7be95ee8a512b639f9ffce947; Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP to *; Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP to *; Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP to *; Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP to *; Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to *; Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to * if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scaniio: adc: ti-adc161s626: use DMA-safe memory for spi_read() affects Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic), Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (generic). Severity is high. In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use it for spi_read() instead of a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we just use a u8[] instead of __be16 and __be32 and change the conversion functions appropriately.
AI coding agents often install or upgrade packages automatically in generic. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
| Package | Affected range | Fixed version |
|---|
| Linux/Linuxgeneric | >=4d671b71beefbfc145b971a11e0c3cabde94b673 <b3bb8faeca1a2ef7be95ee8a512b639f9ffce947 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <fa64aab25aba47296aa8d12bb4c88ec3fecb2054 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <67b3a91bdc48220bfb67155ab528121b9c822782 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <014c6d27878d3883f7bb065610768fd021de1a96 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <d2d031b0786ea66ab0577c9d2d71435068d32199 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <768461517a28d80fe81ea4d5d03a90cd184ea6ad | b3bb8faeca1a2ef7be95ee8a512b639f9ffce947, fa64aab25aba47296aa8d12bb4c88ec3fecb2054, 67b3a91bdc48220bfb67155ab528121b9c822782, 014c6d27878d3883f7bb065610768fd021de1a96, d2d031b0786ea66ab0577c9d2d71435068d32199, 768461517a28d80fe81ea4d5d03a90cd184ea6ad |
|---|---|---|
| Linux/Linuxgeneric | 4.9 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by CVE List V5 (cvelist).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard| Package | Affected range | Fixed version |
|---|
| Linux/Linuxgeneric | >=4d671b71beefbfc145b971a11e0c3cabde94b673 <b3bb8faeca1a2ef7be95ee8a512b639f9ffce947 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <fa64aab25aba47296aa8d12bb4c88ec3fecb2054 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <67b3a91bdc48220bfb67155ab528121b9c822782 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <014c6d27878d3883f7bb065610768fd021de1a96 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <d2d031b0786ea66ab0577c9d2d71435068d32199 || >=4d671b71beefbfc145b971a11e0c3cabde94b673 <768461517a28d80fe81ea4d5d03a90cd184ea6ad | b3bb8faeca1a2ef7be95ee8a512b639f9ffce947, fa64aab25aba47296aa8d12bb4c88ec3fecb2054, 67b3a91bdc48220bfb67155ab528121b9c822782, 014c6d27878d3883f7bb065610768fd021de1a96, d2d031b0786ea66ab0577c9d2d71435068d32199, 768461517a28d80fe81ea4d5d03a90cd184ea6ad |
|---|---|---|
| Linux/Linuxgeneric | 4.9 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by CVE List V5 (cvelist).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard