PT-2024-20211 · Sony · Sony Xav-Ax5500

Name of the Vulnerable Software and Affected Versions: Sony XAV-AX5500 affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this issue...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a race condition issue in the usb:gadget:uaudio module...

DEBIAN-CVE-2024-38567

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports 1 hitting a warning which is caused by presence of a wrong endpoint type at the URB sumbitting stage. While there was a check for a specific 4th endpoint,...

The vulnerability of the disable_{show,store}() functions in the Linux kernel USB driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the disableshow,store functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the interface_authorized_store() function in the Linux kernel USB driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the interfaceauthorizedstore function in the drivers/usb/core/sysfs.c file of the Linux USB driver kernel is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2024-27978 · Gnome +2 · Gnome Settings Daemon +2

Name of the Vulnerable Software and Affected Versions: GNOME Settings Daemon versions through 46.0 Description: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access...

The vulnerability of the QEMU hardware emulation software, related to the cycle with an unreachable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulator is related to an infinite loop error in the emulation of the USB xHCI controller during the calculation of the TRB ring length. Exploiting this vulnerability can allow a hacker to cause a system failure...

The vulnerability of the qemu-kvm hardware emulation package from QEMU allows a attacker to trigger a service failure.

The vulnerability of the qemu-kvm hardware emulation package from QEMU is related to the lack of checks to ensure that the buffer pointer does not overlap with the MMIO region during USB packet transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhcimapurbfordma The Linux kernel CVE team has assigned CVE-2024-26964 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050130-CVE-2024-26964-54c8@gregkh/T...

kernel: USB: core: Fix deadlock in usb_deauthorize_interface()

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface The Linux kernel CVE team has assigned CVE-2024-26934 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26934-e2fc@gregkh/T...

kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

[SECURITY] Fedora 40 Update: qt5-qtserialbus-5.15.14-1.fc40

Qt Serial Bus API provides classes and functions to access the various industrial serial buses and protocols, such as CAN, ModBus, and others...

kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

kernel: USB: core: Fix deadlock in usb_deauthorize_interface()

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface The Linux kernel CVE team has assigned CVE-2024-26934 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26934-e2fc@gregkh/T...

DEBIAN-CVE-2024-36962

In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs Currently the driver uses localbhdisable/localbhenable in its IRQ handler to avoid triggering netrxaction softirq on exit from netifrx. The netrxaction could...

The vulnerability of the Windows Mobile Broadband operating system driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband operating system driver is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by connecting a malicious USB device...

The vulnerability of the Windows Mobile Broadband operating system driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband operating system’s driver is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code by connecting a malicious USB device...

The vulnerability of the Windows Mobile Broadband operating system driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband operating system’s driver is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code by connecting a malicious USB device...

The vulnerability of the Windows Mobile Broadband operating system driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband operating system’s driver is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code by connecting a malicious USB device...

DEBIAN-CVE-2024-36893

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Check for port partner validity before consuming it typecregisterpartner does not guarantee partner registration to always succeed. In the event of failure, port-partner is set to the error value or NULL. Given...