SUSE CVE-2022-50542

In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470xintincallback syzbot reported use-after-free in si470xintincallback 1. This indicates that urb-context, which contains struct si470xdevice object, is freed when si470xintincallback is...

CVE-2023-53644

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the radio-shark2 driver: ------------ cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 3271 at...

UBUNTU-CVE-2023-53644

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the radio-shark2 driver: ------------ cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 3271 at...

CVE-2022-50542

CVE-2022-50542 affects the Linux kernel media/si470x driver. A use-after-free occurs in si470x_int_in_callback() when urb->context (holding a si470x_device) is freed if si470x_start_usb() has submitted a URB but the subsequent si470x_start() path fails. The fix ensures URBs are destroyed when ...

CVE-2022-50542 media: si470x: Fix use-after-free in si470x_int_in_callback()

In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470xintincallback syzbot reported use-after-free in si470xintincallback 1. This indicates that urb-context, which contains struct si470xdevice object, is freed when si470xintincallback is...

CVE-2022-50542 media: si470x: Fix use-after-free in si470x_int_in_callback()

In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470xintincallback syzbot reported use-after-free in si470xintincallback 1. This indicates that urb-context, which contains struct si470xdevice object, is freed when si470xintincallback is...

CVE-2023-53644

The CVE-2023-53644 issue affects the Linux kernel media: radio-shark/radio-shark2 USB driver where endpoints are not validated before use, allowing a warning/invalid transfer path to be triggered. The root cause is missing checks that endpoints exist and have correct types, which can lead to inco...

CVE-2022-50514 usb: gadget: f_hid: fix refcount leak on error path

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

EUVD-2025-32835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

CVE-2022-50514

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

EUVD-2020-6533

Malware in sbrugna...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly terminating a USB request block, which could lead to reuse after release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a lack of endpoint checking and could lead to a USB urb commit error...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-390448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390448 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The devdbg&urb-dev-dev, ... which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986350 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadget panics on 10gbps cabling usbassigndescriptors is called with 5 parameters...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987241 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for outurb's completion in pn533usbsendframe Fix a use-after-free that occurs in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986990 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface There may be a bad USB aud...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414429 advisory. usb8devstartxmit in drivers/net/can/usb/usb8dev.c in the Linux kernel through 5.17.1 has a double free. Tenable has extracted the preceding description block directl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986950 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414549 advisory. In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of...