CVE-2026-80780

CVE-2026-80780 is an out-of-bounds write in the Linux kernel's HID: pidff driver, specifically in hid_pidff_init_with_quirks(). The function calls list_entry() on hid->inputs without verifying the list is non-empty. When hid->inputs is empty—possible with a USB device whose report descripto...

CVE-2026-80773

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

Linux Distros Unpatched Vulnerability : CVE-2026-80780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: pidff: fix OOB write when hid-inputs is empty hidpidffinitwithquirks derives its inputdev from listentryhid-inputs.next, struct hidinput, list without firs...

The vulnerability of the cdns_resume() function in the drivers/usb/cdns3/core.c file of the Linux operating system’s device driver framework allows a hacker to induce a service failure.

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

The vulnerability of the library for working with USB devices using libusb, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the library for working with USB devices using libusb is related to reading data beyond the allowed limits of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the usbhs_remove() function in the drivers/usb/renesas_usbhs/common.c driver module of the Linux operating system’s USB device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c driver for Linux USB device controllers is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098919 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen,...

CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

The vulnerability of the hackrf_probe() function in the drivers/media/usb/hackrf/hackrf.c driver for multimedia devices of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hackrfprobe function in the drivers/media/usb/hackrf/hackrf.c driver for Linux multimedia devices is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

CVE-2026-74457

A flaw was found in the Linux kernel's peakusb module. A malicious USB device could send a specially crafted payload, leading to a heap out-of-bounds read. This vulnerability can cause a kernel panic, resulting in a Denial of Service DoS for the affected system...

CVE-2026-18283

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18283 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18283

Sony XAV-9500ES (digital media player) is affected by an authorization bypass vulnerability in its udev USB rules . A physically present attacker with no authentication can connect a crafted USB device that triggers instantiation of otherwise restricted USB device types, bypassing the system's au...

CVE-2026-18283 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

EUVD-2026-63430

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18283: Improper Authorization

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

Linux Distros Unpatched Vulnerability : CVE-2026-72079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unboun...