SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3656-1)

This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed : CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE...

SUSE-SU-2020:3705-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15)

This update for the Linux Kernel 4.12.14-15063 fixes one issue. The following security issue was fixed: - CVE-2020-11668: Fixed an improper handling of invalid descriptors in Xirlink camera USB driver bsc1173942...

SUSE-SU-2020:3656-1 Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE...

SUSE-SU-2020:3648-1 Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92146 fixes several issues. The following security issues were fixed: - CVE-2020-25668: Fixed a concurrency use-after-free in confontop bsc1178622. - CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is...

CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

RHEL 7 : kernel (RHSA-2020:4236)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4236 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free caused by a malicious US...

kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver

An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality...

In the Linux kernel before 5.6.1 drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors aka CID-a246b4d54770.

...

go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path which causes a memory leak aka CID-9453264ef586.

...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-54064)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Kernel component "USB driver" in Google Android. An attacker could use this to enable local privilege escalati...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2492-1)

This update for the Linux Kernel 4.4.121-92125 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c bsc1173659. CVE-2019-9458: Fixed a use-after-free...

Unspecified Vulnerability in Google Android (CNVD-2021-30161)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Framework is an Android framework component.System is a system component.Broadcom Bluetooth is a Bluetooth component.Wi-Fi is a wireless Internet component.USB driver is a Universal Serial Bus USB...

Unspecified Vulnerability in Google Android (CNVD-2021-30163)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Framework is an Android framework component.System is a system component.Broadcom Bluetooth is a Bluetooth component.Wi-Fi is a wireless Internet component.USB driver is a Universal Serial Bus USB...

USN-4483-1: Linux kernel vulnerabilities

Chuhong Yuan discovered that go7007 USB audio device driver in the Linux kernel did not properly deallocate memory in some failure conditions. A physically proximate attacker could use this to cause a denial of service memory exhaustion. CVE-2019-20810 Fan Yang discovered that the mremap...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4485-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4485-1 advisory. Timothy Michaud discovered that the i915 graphics driver in the Linux kernel did not properly validate user memory locations for the...

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...