Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001824 advisory. The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service NULL pointer dereference and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002806 advisory. drivers/media/usb/dvb-usb/dib0700devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service BUG and system crash or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002825 advisory. The acmprobe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002786 advisory. The cx231xxusbprobe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002577 advisory. The cdcparsecdcheader function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002855 advisory. The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference...

MiracleLinux 4 : libvirt-0.9.10-21.1.0.1.AXS4 (AXSA:2012-655:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-655:03 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd...

CVE-2025-68781

In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The delayed work item otgevent is initialized in fslotgconf and scheduled under two conditions: 1. When a host controller binds to the OTG controller. 2...

CVE-2025-71094 net: usb: asix: validate PHY address before use

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in QEMU. An assertion failure occurred in the usbepget function in hw/net/core.c when attempting to retrieve the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service...

CVE-2026-22212

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000222 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000533 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000364 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000462 advisory. In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000259 advisory. In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaserusb/kvaserusbleaf.c driver, a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000467 advisory. In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka...