ROS-20250205-02

A vulnerability in the PCI component of the Linux operating system kernel is related to incorrect input validation in the vpciscanbus and epfntbbind functions in drivers/pci/endpoint/functions/pci-epf-vntb.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of...

The vulnerability of the Linux operating system’s serial kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s serial kernel component is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

spi: spi-fsl-dspi: Fix crash when not using GPIO chip select

...

phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend

...

xhci: tegra: fix checked USB2 port number

...

net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

...

phy: qcom: qmp-usb: fix NULL-deref on runtime suspend

...

The vulnerability of the spi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the spi component in the Linux operating system’s kernel is related to the disclosure of information in error messages. Exploiting this vulnerability can allow an attacker to cause a service failure...

Silicon CP210x VCP Windows installer 代码问题漏洞

Silicon CP210x VCP Windows installer is a CP210x VCP Windows installer from Silicon Corporation. A security vulnerability exists in Silicon CP210x VCP Windows installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute...

CVE-2024-11147 ECOVACS lawnmowers and vacuums deterministic root password

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root...

PT-2025-1627 · Ecovacs · Ecovacs Robot Lawnmowers/Vacuums

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers and vacuums affected versions not specified Description: The issue concerns the use of a deterministic root password in ECOVACS robot lawnmowers and vacuums, which is generated based on the model and serial number. An...

DEBIAN-CVE-2024-57914

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

CVE-2024-57914 usb: typec: tcpci: fix NULL pointer issue on shared irq case

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

PT-2025-3640

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the u serial gadget when the gserial disconnect function clears the gser-ioport, triggering gadget reconfiguration and...

PT-2025-1231 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. Some values are serialized using the boost library, which...

PT-2025-1229 · Mercedes Benz · Mbux +1

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. A file within the profile folder is encoded with a...

PT-2026-2936

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description A race condition exists in the serial channel IRP thread tracking of FreeRDP, potentially leading to a heap use-after-free. This occurs when one thread removes an entry from serial-IrpThreads while...

PT-2025-6062

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-ptr-deref issue has been resolved in the Linux kernel, specifically in the quatech2 USB serial driver. The issue arises from an incorrect bounds check in the qt2 process read urb...

SUSE CVE-2024-57804

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs The driver, through the SAS transport, exposes a sysfs interface to enable/disable PHYs in a controller/expander setup. When multiple PHYs are disabled and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the spi: mpc52xx module being removed without first canceling the work item, which could lead to a...