GHSA-92F5-VC22-8J33 Microsoft QUIC: Remote Code Execution Vulnerability

Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. Details New network path creations and removals triggered by incoming packets can lead to a pointer invalidation. Patches - Guard path promotion e0f55b5 Impact An unauthenticated attacker coul...

The vulnerability of the uas_queuecommand_lck() function in the drivers/usb/storage/uas.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the uasqueuecommandlck function in the drivers/usb/storage/uas.c module of the Linux device driver framework is related to the pointer that becomes invalid after a certain period of time. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-37986

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers on partner unregistration To avoid using invalid USB device pointers after a Type-C partner disconnects, this patch clears the pointers upon partner unregistration. This ensures a...

CVE-2022-49873 bpf: Fix wrong reg type conversion in release_reference()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in releasereference Some helper functions will allocate memory. To avoid memory leaks, the verifier requires the eBPF program to release these memories by calling the corresponding helper...