Linaro vulnerabilities

Products

• Lava 6
• Op-tee 2

Newest

• linaro openamp OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image... CVE-2026-37540 8.4 HighMay 1, 2026
• linaro lava In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be... CVE-2022-45132 Fix available 9.8 CriticalNovember 18, 2022
• linaro lava, debian linux +1 more In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials... CVE-2022-44641 Fix available 6.5 MediumNovember 18, 2022
• linaro lava, debian linux +1 more In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code... CVE-2022-42902 Fix available 8.8 HighOctober 13, 2022
• linaro lava, debian linux +1 more An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead... CVE-2018-12565 Fix available 8.8 HighJune 19, 2018
• linaro lava, debian linux +1 more An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the... CVE-2018-12564 Fix available 6.5 MediumJune 19, 2018
• linaro lava An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a... CVE-2018-12563 Fix available 6.5 MediumJune 19, 2018
• linaro op-tee Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key. CVE-2017-1000413 5.9 MediumJanuary 2, 2018
• linaro op-tee Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key. CVE-2017-1000412 7.5 HighJanuary 2, 2018