461 matches found
linux-fingerprint-r503
linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer is allocated in setupportinterruptin based on the endpoint’s wMaxPacketSize: buffersize = usbendpointmaxpepd; port-interruptinbuffer =...
CVE-2026-80827
A flaw was found in the Linux kernel's USB serial option driver. A malicious USB device could exploit this vulnerability by sending a specially crafted short data packet. This could lead to an out-of-bounds read in memory, potentially allowing an attacker to access sensitive information or cause ...
CVE-2026-98772
A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service DoS due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion handlers to access port driver data after it has already been...
CVE-2026-98697
A flaw was found in the Linux kernel's USB serial subsystem. A race condition during USB serial driver deregistration can result in a kernel memory leak. A local user with permissions to modify driver attributes can trigger this issue by writing to the dynamic identifier interface while the drive...
CVE-2026-98695
A flaw was found in the Linux kernel's USB serial subsystem. A local user could cause a Denial of Service DoS due to a race condition between input/output control ioctl operations and device disconnection. If a USB serial device is disconnected during an active operation, the driver may attempt t...
kernel security update
4.18.0-553.177.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
CVE-2026-98696
A flaw was found in the Linux kernel's USB serial subsystem. A local user with administrative privileges could exploit this flaw to cause a Denial of Service DoS or memory corruption. During the unloading of a USB serial driver module, drivers are deregistered in an incorrect sequence, allowing...
SUSE CVE-2026-98772
In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix port tear down use-after-free Some drivers for multiport devices access port driver data from completion handlers of shared URBs submitted at attach or first open and stopped at disconnect or last close,...
kernel: USB: serial: cypress_m8: fix memory corruption with small endpoint
A flaw was found in the Linux kernel's cypressm8 USB serial driver. A malicious Universal Serial Bus USB device could report a packet size smaller than eight bytes for the interrupt-out endpoint. This can lead to memory corruption, specifically user-controlled slab corruption or a NULL-pointer...
kernel: USB: serial: mxuport: fix memory corruption with small endpoint
A flaw was found in the Linux kernel's USB serial mxuport driver. A malicious Universal Serial Bus USB device could exploit this vulnerability by reporting a bulk-out endpoint maximum packet size smaller than eight bytes. This can lead to user-controlled slab corruption, potentially allowing an...
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
kernel security, bug fix, and enhancement update
4.18.0-553.176.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
ALSA-2026:85773 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-53196 kernel: sctp: keep chunk-transport in...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi105preparewritebuffer is called by the generic write path using the bulk-out buffer and its size bulkoutsize, 64 bytes. It stores a two-byte length header at the beginning...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioti: fix heap overflow in getmanufinfo getmanufinfo reads le16tocpuromdesc-Size bytes from the device’s I2C EEPROM into a buffer allocated with kmallocobj, which is sizeofstruct edgetimanufdescriptor = 10 bytes. The...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: validate interrupt packet headers cypressreadintcallback parses the interrupt-in buffer according to the selected Cypress packet format. Format 1 includes a two-byte status/count header, while Format 2 use...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in “safe” mode should a malicious device report a smaller...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...