7515 matches found
CVE-2026-32291
The GL-iNet Comet GL-RM1 KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins...
CVE-2026-32706
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsfrc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsfrc is enabled on a CRSF serial port, an...
net: usb: kalmia: validate USB endpoints
...
can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
...
can: usb: f81604: correctly anchor the urb in the read bulk callback
...
net: usb: pegasus: validate USB endpoints
...
can: usb: f81604: handle short interrupt urb messages properly
...
can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
...
ALSA: usb-audio: Use correct version for UAC3 header validation
...
net: usb: kaweth: validate USB endpoints
...
The vulnerability of the lpuart_set_termios() function in the drivers/tty/serial/fsl_lpuart.c file of the console TTY driver in the Linux kernel’s serial port layer allows a attacker to cause a service failure.
The vulnerability of the lpuartsettermios function in the drivers/tty/serial/fsllpuart.c file of the console TTY driver in the Linux kernel’s serial port layer is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-4346: Cleartext Storage of Sensitive Information
The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface remains enabled and protected by weak authentication. An attacker with physical access and the ability to connect to the...
PT-2026-36071
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description An infinite loop in the USB HID protocol dissector can lead to a denial of service. Recommendations Update Wireshark versions 4.6.0 through 4.6.4 to a...
The vulnerability of the pch_request_dma() function in the drivers/tty/serial/pch_uart.c module of the console TTY driver in the Linux kernel’s serial port allows a attacker to cause a service failure.
The vulnerability of the pchrequestdma function in the drivers/tty/serial/pchuart.c file of the TTY driver in the Linux kernel’s serial port module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ata_tport_add() function in the drivers/ata/libata-transport.c file of the SATA/PATA driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the atatportadd function in the drivers/ata/libata-transport.c file of the Linux SATA/PATA driver kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
TP-Link TL-WR850N 安全漏洞
The TP-Link TL-WR850N is a WiFi router produced by the TP-Link company. The TP-Link TL-WR850N v3 has a security vulnerability. This vulnerability arises from the fact that, when the serial interface is enabled and under weak authentication protection, management credentials and Wi-Fi credentials...
The vulnerability in the `serial8250_register_ports()` function of the `drivers/tty/serial/8250/8250_core.c` file of the console support driver for the serial port in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the serial8250registerports function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel relates to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a servi...
PT-2026-28644
Name of the Vulnerable Software and Affected Versions TL-WR850N version 3 Description The issue allows for the storage of administrative and Wi-Fi credentials in cleartext within a region of the device’s flash memory. The serial interface remains enabled and is protected by weak authentication. A...
CVE-2026-23318
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. A malicious USB Audio Class 3 UAC3 device could exploit an incorrect protocol version used for UAC3 header validation. This error causes the device's header descriptors to bypass validation, allowing a...
SUSE CVE-2026-23307
In the Linux kernel, the following vulnerability has been resolved: can: emsusb: emsusbreadbulkcallback: check the proper length of a message When looking at the data in a USB urb, the actuallength is the size of the buffer passed to the driver, not the transferbufferlength which is set by the...