PT-2021-25348

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.195 Description: A potential security issue exists due to a NULL pointer exception in the dwc3 ep0 component of the USB driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-25331

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.237 Description: A potential security issue exists due to a NULL pointer exception in the dwc3 ep0 component of the USB driver. The actual impact and attack plausibility have not yet been proven...

PT-2024-11275

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.19.124 Description The issue is related to a NULL pointer exception in the Linux kernel's USB driver, specifically in the dwc3 module. There is no validation of the index from dwc3 wIndex to dep, which can lead to...

PT-2021-28523

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the USB driver, specifically the dwc3 core. The actual impact and attack plausibility have not yet...

PT-2021-28565

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the USB driver, specifically the dwc3 core. The actual impact and attack plausibility have not yet...

PT-2021-28783

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description The issue is related to the gadget structure in the USB driver, specifically the dwc3 gadget. The problem arises when the gadget structure is not properly freed after freeing endpoints. This...

PT-2021-24607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the USB driver in the Linux Kernel. It involves a core soft reset when switching modes. The actual impact and potential for attack have not been proven yet...

PT-2021-24529

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the USB driver, specifically the dwc3 core. The actual impact and attack plausibility have not yet...

PT-2021-24571

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.20 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the USB driver, specifically the dwc3 core. The actual impact and attack plausibility have not ye...

PT-2021-28601

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the USB driver, specifically the dwc3 core. The actual impact and attack plausibility have not yet...

kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver

A use-after-free flaw was found in iowarriordisconnect in iowarrior USB driver module were a flag was simultaneously modified causing a race between a device open and disconnect. This flaw could allow a physical attacker to cause a denial of service DoS attack. This vulnerability could even lead ...

SUSE: Security Advisory (SUSE-SU-2018:3083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-29265

An issue was discovered in the Linux kernel before 5.11.7. usbipsockfdstore in drivers/usb/usbip/stubdev.c allows attackers to cause a denial of service GPF because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70...

Code injection

In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure4 device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0108-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559. CVE-2020-27825: Fixed a race in the traceopen and buffer resi...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3656-1)

This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed : CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE...

SUSE-SU-2020:3705-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15)

This update for the Linux Kernel 4.12.14-15063 fixes one issue. The following security issue was fixed: - CVE-2020-11668: Fixed an improper handling of invalid descriptors in Xirlink camera USB driver bsc1173942...

SUSE-SU-2020:3656-1 Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE...