196 matches found
cve-2022-31705
CVE-2022-31705 はじめに https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Windows VMware Workstation 16.2.0 でテスト。ゲストOS は Ubuntu Server 22 少なくとも1つのUSBデバイスがゲストマシンに接続されている必要がある ehci.c コード内の 'qh-field4' を変更する 'sudo ./run.sh' と入力して PoC をコンパイルし、実行す...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: usb: host: Fixed the refcount leak in ehcihcdppcofprobe. offindcompatiblenode returns a node pointer with a refcount incremented; we should use ofnodeput on it after processing. Add ofnodeput to avoid the refcount leak...
Astra Linux – Vulnerability in Qemu
A reentrancy issue related to DMA was discovered in the USB EHCI controller emulation of QEMU. EHCI does not verify whether the Buffer Pointer overlaps with its MMIO region when transferring USB packets. Crafted content may be written to the controller’s registers, potentially triggering...
AZL-93794 CVE-2026-64348 affecting package kernel for versions less than 6.6.145.2-1
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...
CVE-2026-64348
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...
CVE-2026-64348
CVE-2026-64348 is a memory leak in the Linux kernel's USB subsystem affecting EHCI and FOTG210 isochronous submit paths. When usb_hcd_link_urb_to_ep() fails or the controller becomes inaccessible, the staged ehci_iso_sched is leaked on urb->hcpriv because the done_not_linked error path skips t...
EUVD-2026-48892
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...
CVE-2026-64348 usb: free iso schedules on failed submit
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...
CVE-2026-64348 usb: free iso schedules on failed submit
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...
CVE-2026-64348: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011115)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011115 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001078)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001078 advisory. Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993015)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993015 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer wit...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992253)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992253 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer wit...
CVE-2023-53986
In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved instructio...
CVE-2023-53986
CVE-2023-53986 concerns a Linux kernel issue for mips BMIPS BCM6358 where RAC (Read-Ahead Cache) flush is disabled for TP1. The bug caused kernel panics on BCM6358 when EHCI/OHCI USB drivers boot from TP1 due to RAC not being initialized properly, leading to a fatal exception and reboot. The vuln...
CVE-2023-53986: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved instructio...
EUVD-2016-10698
Malware in sbrugna...