PT-2026-24767

Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized payload. Attackers can paste a 6000-byte buffer of arbitrary data into the 'Serial Number and Registration Key' field ...

PT-2026-39121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the rockchip-sfc SPI driver. The driver utilizes devm spi register controller for registration, which automatically handles controller unregistration during...

The vulnerability of the rndisbind() function in the drivers/usb/gadget/function/f_rndis.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hdm_disconnect() function in the drivers/most/most_usb.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the hdmdisconnect function in the drivers/most/mostusb.c component of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ncmbind() function in the drivers/usb/gadget/function/f_ncm.c file of the Linux operating system’s USB gadget driver module allows a attacker to cause a service failure.

The vulnerability of the ncmbind function in the drivers/usb/gadget/function/fncm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sa1100_set_termios() function in the drivers/tty/serial/sa1100.c file of the console support driver for the TTY serial port in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the sa1100settermios function in the drivers/tty/serial/sa1100.c file, a driver for supporting TTY consoles on the serial port of the Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the oxu_bus_suspend() function in the drivers/usb/host/oxu210hp-hcd.c driver for supporting USB device controllers in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the oxubussuspend function in the drivers/usb/host/oxu210hp-hcd.c file of the Linux device support driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xhciwrite64 function in the drivers/usb/host/xhci.h module of the Linux device support driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the icom_probe() function in the drivers/tty/serial/icom.c module of the console support driver for the TTY serial port in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the icomprobe function in the drivers/tty/serial/icom.c module of the console support driver for the TTY serial port in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a...

NewStart CGSL MAIN 6.06 (SP) : qemu Multiple Vulnerabilities (NS-SA-2026-0014)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has qemu packages installed that are affected by multiple vulnerabilities: - A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a...

The vulnerability in the isp116xremove() function of the drivers/usb/host/isp116x-hcd.c driver module allows a malicious actor to cause a service failure.

The vulnerability of the isp116xremove function in the drivers/usb/host/isp116x-hcd.c file of the Linux kernel’s USB device support driver is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the snd_usbmidiOutputOpen() function in the sound/usb/midi.c module of Linux’s USB audio device support allows a hacker to cause a service failure.

The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which is part of Linux’s USB audio device support, involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a hacker to cause service failures...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005804 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3qcomprobe allocates memory for resource...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005726 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Add null pointer check in gserialsuspend Consider a case where...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005676 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...

USN-8070-3: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

MINI-M4CW-FRG2-458J

Bulletin has no description...

ROS-20260304-73-0017

A vulnerability in the usbhsprobe function of the usb component of the Linux operating system kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260304-73-0033

A vulnerability in the sndusbgetaudioformatuac3 sound/usb/stream.c function of the Linux kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005606 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...