5939 matches found
CVE-2025-37810
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...
CVE-2025-37810 usb: dwc3: gadget: check that event count does not exceed event buffer length
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...
CVE-2025-37810 usb: dwc3: gadget: check that event count does not exceed event buffer length
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...
CVE-2025-37810
CVE-2025-37810 refers to a Linux kernel issue in the usb: dwc3 gadget path where the event count check did not validate that the count did not exceed the event buffer length. The problem could allow an out-of-bounds memcpy of an event if the count is larger than the buffer, leading to a crash (ke...
PT-2025-20339
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the USB gadget functionality, specifically in the dwc3 driver. The problem occurs when the event count read...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check event count boundaries, which could lead to out-of-bounds access...
SUSE CVE-2022-49820
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
SUSE CVE-2022-49822
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt leak since the cifsd kthread not exit. Also leak the fscache info, and for next mount with fsc, it...
SUSE CVE-2022-49826
In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double atahostput in atatportadd In the error path in atatportadd, when calling putdevice, atatportrelease is called, it will put the refcount of 'ap-host'. And then atahostput is called again, the...
PT-2025-22210
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer fault was reported in the xenbus thread callstack. The issue occurs when the req object is freed while the xenbus thread is still using it, causing a kernel NULL pointer...
CVE-2024-45570
Memory corruption may occur during IO configuration processing when the IO port count is invalid...
CVE-2024-45563
Memory corruption while handling schedule request in Camera Request ManagerCRM due to invalid link count in the corresponding session...
CVE-2024-45564
Memory corruption during concurrent access to server info object due to incorrect reference count update...
CVE-2024-45566
Memory corruption during concurrent buffer access due to modification of the reference count...
CVE-2024-45564
Memory corruption during concurrent access to server info object due to incorrect reference count update...
CVE-2024-45566
Memory corruption during concurrent buffer access due to modification of the reference count...
CVE-2024-45570
CVE-2024-45570 is a memory corruption issue in Qualcomm chipsets that occurs during IO configuration processing when the IO port count is invalid. The vulnerability affects the IO configuration path (component/driver/function) and is described with a local attack vector, low authentication requir...
CVE-2024-45566
CVE-2024-45566 concerns memory corruption in Qualcomm camera driver due to concurrent buffer access triggered by modification of the reference count. Multiple sources (NVD/Red Hat/CVE list) describe a use-after-free style memory corruption when references are modified while buffers are in use, wi...
