PatchTheCVEallwinner vulnerabilities
Recent CVEs affecting allwinner products. 4 tracked.
allwinner has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-03-27. Highest priority: CVE-2016-10225 (score 60/100).
- CVE-2017-5927 HIGH 7.5 MITIGATE MITIGATE Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last
- CVE-2017-5926 HIGH 7.5 MITIGATE MITIGATE Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last
- CVE-2017-5925 HIGH 7.5 MITIGATE MITIGATE Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last
- CVE-2016-10225 HIGH 7.8 MITIGATE The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain r
FAQ
How do I fix allwinner vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is allwinner being exploited right now?
None of the tracked allwinner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which allwinner CVE should I patch first?
CVE-2016-10225 currently ranks highest (60/100): The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain r.