CVE-2025-21916

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix a flaw in existing endpoint checks Syzbot once again identified a flaw in usb endpoint checking, see 1. This time the issue stems from a commit authored by me 2eabb655a968 "usb: atm: cxacru: fix endpoint...

Vulnerability of the ci_hdrc_imx_probe() function in the drivers/usb/chipidea/ci_hdrc_imx.c module – This driver provides support for USB devices on Linux kernels. It can be exploited by attackers to cause system failures.

Vulnerability of the cihdrcimxprobe function in the drivers/usb/chipidea/cihdrcimx.c module – The Linux kernel’s USB device support driver is vulnerable due to a pointer issue related to NULL pointers. Exploiting this vulnerability could allow an attacker to cause system failures...

CVE-2022-49756 phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()

In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in spusbphyprobe spusbphyprobe will call platformgetresourcebyname that may fail and return NULL. devmioremap will use usbphy-moon4resmem-start as input, which may causes...

CVE-2022-49756

In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in spusbphyprobe spusbphyprobe will call platformgetresourcebyname that may fail and return NULL. devmioremap will use usbphy-moon4resmem-start as input, which may causes...

The vulnerability of the functions dwc3_suspend_common() and dwc3_resume_common() in the Linux kernel’s USB driver (drivers/usb/dwc3/core.c) allows a hacker to induce a service failure.

The vulnerability of the dwc3suspendcommon and dwc3resumecommon functions in the Linux kernel’s USB driver drivers/usb/dwc3/core.c is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-24055 Windows USB Video Class System Driver Information Disclosure Vulnerability

...

CVE-2025-24987 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Linux Distros Unpatched Vulnerability : CVE-2024-38567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports 1 hitting a warning which is caused by presence of a wrong endpoint type at the URB...

DEBIAN-CVE-2025-21827

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

CVE-2025-21827

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

UBUNTU-CVE-2025-21827

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

CVE-2025-21827 Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

CVE-2025-21827 Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

Linux Distros Unpatched Vulnerability : CVE-2025-21827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for...

Linux Distros Unpatched Vulnerability : CVE-2024-56670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: userial: Fix the issue that gsstartio crashed due to accessing null pointer Considering that in some extreme cases, when userial driver is accessed...

Linux Distros Unpatched Vulnerability : CVE-2022-49299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: don't reset gadget's driver-bus UDC driver should not touch gadget's driv...

Linux Distros Unpatched Vulnerability : CVE-2022-3903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB...

Linux Distros Unpatched Vulnerability : CVE-2022-48834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a...

Linux Distros Unpatched Vulnerability : CVE-2023-52528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit- value access issue:...