CVE-2025-38010 phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking The current implementation uses biaspadenable as a reference count to manage the shared bias pad for all UTMI PHYs. However, during system suspension with connecte...

CVE-2019-9019

The British Airways Entertainment System, as installed on Boeing 777-36NER and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks agains...

CVE-2025-37985 USB: wdm: close race between wdm_open and wdm_wwan_port_stop

In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdmopen and wdmwwanportstop Clearing WDMWWANINUSE must be the last action or we can open a chardev whose URBs are still poisoned...

CVE-2023-53086

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do not check it for usb or sdio devices. This patch fixes the crash reported below: 21.946627 wlp0s3u1i3: authenticate wi...

SUSE CVE-2023-53086

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do not check it for usb or sdio devices. This patch fixes the crash reported below: 21.946627 wlp0s3u1i3: authenticate wi...

CVE-2023-53086

The CVE-2023-53086 entry describes a Linux kernel fix for the wifi mt76 connac driver: WED status checks were erroneously performed on non-MMIO devices (e.g., USB/SDIO). The underlying issue could trigger a crash or kernel fault during authentication/association with wireless peers, as evidenced ...

[SECURITY] Fedora 41 Update: golang-github-openprinting-ipp-usb-0.9.30-1.fc41

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol...

Linux Distros Unpatched Vulnerability : CVE-2023-6039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in lan78xxdisconnect in drivers/net/usb/lan78xx.c in the network sub- component, net/usb/lan78xx in the Linux Kernel. This flaw...

Linux Distros Unpatched Vulnerability : CVE-2022-23467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attack...

Linux Distros Unpatched Vulnerability : CVE-2017-16525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The usbserialconsoledisconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2017-16531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have...

Linux Distros Unpatched Vulnerability : CVE-2017-16535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The usbgetbosdescriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service out-of-bounds...

DEBIAN-CVE-2022-49306

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: host: Stop setting the ACPI companion It is no longer needed. The sysdev pointer is now used when assigning the ACPI companions to the xHCI ports and USB devices. Assigning the ACPI companion here resulted in the...

UBUNTU-CVE-2022-49306

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: host: Stop setting the ACPI companion It is no longer needed. The sysdev pointer is now used when assigning the ACPI companions to the xHCI ports and USB devices. Assigning the ACPI companion here resulted in the...

CVE-2022-49306

CVE-2022-49306 affects the Linux kernel USB subsystem (usb: dwc3: host). The issue arises from stop setting the ACPI companion for the DWC3 host; the sysdev pointer is now used when assigning ACPI companions to xHCI ports and USB devices. Assigning the ACPI companion previously could replace the ...

CVE-2022-49306

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: host: Stop setting the ACPI companion It is no longer needed. The sysdev pointer is now used when assigning the ACPI companions to the xHCI ports and USB devices. Assigning the ACPI companion here resulted in the...

CVE-2022-49306 usb: dwc3: host: Stop setting the ACPI companion

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: host: Stop setting the ACPI companion It is no longer needed. The sysdev pointer is now used when assigning the ACPI companions to the xHCI ports and USB devices. Assigning the ACPI companion here resulted in the...

Amazon Linux 2 : opensc (ALAS-2024-2709)

The version of opensc installed on the remote host is prior to 0.19.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2709 advisory. It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and...

Low: opensc

Issue Overview: It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. CVE-2024-45615 It is caused by th...

CVE-2024-46383

CVE-2024-46383 affects Hathway Skyworth Router CM5100-511, version 4.1.1.24. The issue is storage of sensitive information about USB and Wi-Fi–connected devices in plaintext, enabling potential exposure. Documented root cause and impact are plaintext storage; exploitation details are not provided...