usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal

...

CVE-2025-68781

In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The delayed work item otgevent is initialized in fslotgconf and scheduled under two conditions: 1. When a host controller binds to the OTG controller. 2...

[SECURITY] Fedora 43 Update: gpsd-3.26.1-6.fc43

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

EUVD-2025-206289

A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive...

SUSE CVE-2025-68781

In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The delayed work item otgevent is initialized in fslotgconf and scheduled under two conditions: 1. When a host controller binds to the OTG controller. 2...

CVE-2025-65396

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...

CVE-2025-67399

An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device is open to access...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003345 advisory. The powermateprobe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NUL...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002976 advisory. The cdcparsecdcheader function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003247 advisory. The parsehidreportdescriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service out-of-bounds...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002993 advisory. The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003170 advisory. The stubrecvcmdsubmit function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003194 advisory. The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002056 advisory. The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service NULL pointer dereference and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003139 advisory. The usbgetbosdescriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service out-of-bounds read a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002556 advisory. In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces tha...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002670 advisory. The mctu232msrtostate function in drivers/usb/serial/mctu232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NU...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003310 advisory. The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003341 advisory. The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003073 advisory. In changeportsettings in drivers/usb/serial/ioti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial...