CVE-2021-47269

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextodep and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer ep...

DEBIAN-CVE-2021-47239

In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xxbind The commit 46a8b29c6306 "net: usb: fix memory leak in smsc75xxbind" fails to clean up the work scheduled in smsc75xxreset- smsc75xxsetmulticast, which leads to use-after-free ...

CVE-2021-47239

In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xxbind The commit 46a8b29c6306 "net: usb: fix memory leak in smsc75xxbind" fails to clean up the work scheduled in smsc75xxreset- smsc75xxsetmulticast, which leads to use-after-free ...

CVE-2021-47344 media: zr364xx: fix memory leak in zr364xx_start_readpipe

In the Linux kernel, the following vulnerability has been resolved: media: zr364xx: fix memory leak in zr364xxstartreadpipe syzbot reported memory leak in zr364xx driver. The problem was in non-freed urb in case of usbsubmiturb fail. backtrace: kmalloc include/linux/slab.h:561 inline...

CVE-2021-47231

The Linux kernel contains a memory leak vulnerability in the SocketCAN driver for the Microchip CAN BUS Analyzer Tool (mcba_usb ). The issue arises because 20 coherent buffers allocated in mcba_usb_start() are never freed; specifically, the URB_FREE_BUFFER flag is missing in the disconnect functi...

The vulnerability of the cdns3_gadget_giveback() function in the drivers/usb/cdns3/cdns3-gadget.c file of the USB Cadence driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdns3gadgetgiveback function in the drivers/usb/cdns3/cdns3-gadget.c file of the USB Cadence driver for the Linux operating system is related to the reallocation of allocated memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the cdns3_gadget_ep_disable() function in the drivers/usb/cdns3/cdns3-gadget.c driver for the USB Cadence kernel of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the cdns3gadgetepdisable function in the drivers/usb/cdns3/cdns3-gadget.c driver of the Linux operating system’s USB driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

DEBIAN-CVE-2023-52655

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeofu64 the value passed to skbtrim as length will wrap around ending up as some very large value. The driver will then proce...

CVE-2023-52655

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeofu64 the value passed to skbtrim as length will wrap around ending up as some very large value. The driver will then proce...

CVE-2023-52655 usb: aqc111: check packet for fixup for true limit

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeofu64 the value passed to skbtrim as length will wrap around ending up as some very large value. The driver will then proce...

CVE-2023-52655 usb: aqc111: check packet for fixup for true limit

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeofu64 the value passed to skbtrim as length will wrap around ending up as some very large value. The driver will then proce...

PT-2025-38397

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak within the dwc3 USB driver related to the use of the debugfs lookup function. Failing to call dput on the result of debugfs lookup leads to a memo...

Exploit for CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulner...

CVE-2024-26748

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...

CVE-2021-47173

CVE-2021-47173 is a Linux kernel issue described in connected advisories as a memory-leak bug in the USB subsystem. Specifically, the probe for the uss720 device (uss720_probe) forgets to decrement the usbdev refcount, leading to a memory leak. The fix recorded in the sources is to release the de...

CVE-2021-47170

CVE-2021-47170 (Linux kernel) is described in the initial document as a benign user‑request issue where usbfs would emit a WARN when a user submits an excessively large memory allocation for bulk transfers. The vulnerability is not a flaw in kernel logic, but a misinterpretation of invalid reques...

SUSE CVE-2023-52528

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xxwaitready...

DEBIAN-CVE-2023-52528

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xxwaitready...

CVE-2021-46941

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

UBUNTU-CVE-2021-46941

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...