31 matches found
The vulnerability of the cdns3_allocate_trb_pool() function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cdns3allocatetrbpool function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise the...
EUVD-2025-14108
Malicious code in bioql PyPI...
Malicious code in @zalastax/nolb-_trb (npm)
The package @zalastax/nolb-trb was found to contain malicious code...
MAL-2025-10515 Malicious code in @zalastax/nolb-_trb (npm)
The package @zalastax/nolb-trb was found to contain malicious code...
CVE-2025-37882 usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...
CVE-2024-42226
Removed by vendor...
CVE-2024-42226
The initial CVE-2024-42226 entry is marked as Rejected in the description, but connected advisories reference the CVE with kernel fixes. In particular, SUSE advisory SUSE-SU-2024-4364-1 and SUSE-SU-2024-3983-1 (and related OSS/OpenVAS/Nessus entries) list CVE-2024-42226 in the kernel vulnerabilit...
CVE-2024-26659
A flaw was found in the Linux kernel related to the Extensible Host Controller Interface xHCI subsystem, specifically how it handles certain events. The issue arises when the xHCI driver improperly handles isochronous isoc Babble and Buffer Overrun events. The vulnerability occurs because the xHC...
CVE-2024-26659
In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes su...
PT-2024-21436
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the xHCI driver in the Linux kernel, which incorrectly handles isoc Babble and Buffer Overrun events. Specifically, when the xHC reports an error on one of the...
SUSE CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to an infinite loop in USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring...
CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...
CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...
CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...
GSD-2022-1001083 usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value
usb: cdnsp: fix cdnspdecodetrb function to properly handle ret value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...
PT-2022-29689
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the cdnsp decode trb function, which does not properly handle return values. This could potentially lead to security vulnerabilities, although the actual impact and...
PT-2022-29356
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.3 Description The issue is related to the cdnsp decode trb function, which does not properly handle return values. This could potentially lead to security vulnerabilities, although the actual impact and atta...
PT-2022-30011
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the cdnsp decode trb function, which does not properly handle return values. This could potentially lead to security vulnerabilities, although the actual impact and...