UBUNTU-CVE-2022-50633

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit oficcget alloc resources for path handle, we should release it when not need anymore. Like the release in dwc3qcominterconnectexit function. Add iccput in error handlin...

CVE-2023-53785

The CVE-2023-53785 entry concerns the Linux kernel mt76/mt7921 SDIO path. The vulnerability arises when mt7921_usb_sdio_tx_prepare_skb() and mt7921_skb_add_usb_sdio_hdr() blindly assume sufficient headroom in an skb, which can trigger kernel panics if the skb originates from a receive path (e.g.,...

CVE-2023-53779

Removed by vendor...

CVE-2023-53779

The CVE-2023-53779 entry concerns a Linux kernel memory-leak in the mfd: dln2 path. Specifically, in dln2_probe(), if dln2_setup_rx_urbs() fails, the error handling path previously failed to call usb_put_dev(), leaving the dln2->usb_dev refcount unreleased. The referenced fixes add usb_put_dev...

PT-2025-49639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the dln2 probe function within the kernel's MFD Multiple Function Device driver for DLN2 devices. Specifically, when dln2 setup rx urbs fails during the probe...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-storage alauda not verifying the USB transfer state, which could lead to the use of uninitialized data...

Siemens SIMATIC CN 4100 访问控制错误漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. The Siemens SIMATIC CN 4100 suffers from an Access Control Error vulnerability that originates when the USB port allows an unauthenticated connection, which can be exploited by an attacker to cause a denial of service...

CVE-2025-48625

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48625

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

...

EUVD-2023-60060

In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fix out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmapaddirqchipfwnode, the intent is to allocate a matrix with numconfigbases rows and...

CVE-2023-53761 USB: usbtmc: Fix direction for 0-length ioctl control messages

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

PT-2025-49582

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-40283

A use-after-free was found in the btusb Bluetooth driver in the Linux kernel. In btusbdisconnect, calling usbdriverreleaseinterface frees the btusb data structure, but the code subsequently accesses fields from this freed structure, causing a use-after-free condition...

CVE-2025-40269

No description is available for this CVE. Mitigation To mitigate this issue, prevent the sndusbaudio kernel module from loading if USB audio functionality is not required. Create a file /etc/modprobe.d/disable-snd-usb-audio.conf with the following content: install sndusbaudio /bin/true After...

DEBIAN-CVE-2025-40275

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in sndusbmixercontrolsbadd In sndusbcreatestreams, for UAC version 3 devices, the Interface Association Descriptor IAD is retrieved via usbifnumtoif. If this call fails, a fallback...

CVE-2025-40269

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and each packet size is determined dynamically. The packet sizes are limited by so...

CVE-2025-40283 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: reorder cleanup in btusbdisconnect to avoid UAF There is a KASAN: slab-use-after-free read in btusbdisconnect. Calling "usbdriverreleaseinterface&btusbdriver, data-intf" will free the btusb data associated with...

CVE-2025-40275

CVE-2025-40275 is a Linux kernel vulnerability in the ALSA USB audio path. For UAC v3 devices, snd_usb_create_streams() may retrieve the Interface Association Descriptor (IAD) with usb_ifnum_to_if(), and if that call fails the code may fall back to the next interface to set a BADD profile. The co...