6203 matches found
MAL-2025-44915 Malicious code in kssd-vol4-debug-serial-erlinglingliu-erlingyiyi (npm)
The package kssd-vol4-debug-serial-erlinglingliu-erlingyiyi was found to contain malicious code...
MAL-2025-44914 Malicious code in kssd-vol4-debug-serial-erlinglingling-erlinglinger (npm)
The package kssd-vol4-debug-serial-erlinglingling-erlinglinger was found to contain malicious code...
usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
...
usb: gadget: u_serial: Fix race condition in TTY wakeup
...
usb: typec: altmodes/displayport: do not index invalid pin_assignments
...
usb: typec: displayport: Fix potential deadlock
...
usb: net: sierra: check for no status endpoint
...
spi: fsl-qspi: use devm function instead of driver remove
...
Null pointer deref in X509_issuer_and_serial_hash()
...
CVE-2025-36907
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
serial: sc16is7xx: fix invalid FIFO access with special register set
...
usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
...
usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
...
usb: gadget : fix use-after-free in composite_dev_cleanup()
...
phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
...
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
...
spi: Fix null dereference on suspend
...
PT-2025-35890
Name of the Vulnerable Software and Affected Versions: abl affected versions not specified Description: A heap buffer overflow exists in the draw surface image function within abl/android/lib/draw/draw.c. This issue may lead to local escalation of privilege via USB fastboot after a bootloader...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-audio not validating the length of the UAC3 power domain descriptor, which could lead to out-of-bounds...
spi: lpspi: Avoid potential use-after-free in probe()
...