AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2026:62631)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servi...

The vulnerability of the cdns_resume() function in the drivers/usb/cdns3/core.c file of the Linux operating system’s device driver framework allows a hacker to induce a service failure.

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ucan_probe() function in the drivers/net/can/usb/ucan.c module of the Linux network device driver allows a hacker to cause a service failure.

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the usblp_cache_device_id_string() function in the drivers/usb/class/usblp.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usblpcachedeviceidstring function in the drivers/usb/class/usblp.c module of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the pin_assignment_show() function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pinassignmentshow function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the usblp_probe() function in the drivers/usb/class/usblp.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105438 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refc...

Important: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

golang-github-openprinting-ipp-usb security update

0.9.27-7.3 - Rebuilt with golang-1.26.7-1.el102 to fix CVE-2026-42504,CVE-2026-33818,CVE-2026-56853,CVE-2026-56859,CVE-2026-56860,CVE-2026-56862...

ALSA-2026:62631 Important: golang-github-openprinting-ipp-usb security update

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105457 advisory. In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member uzonesize of struct...

The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML...

The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Unity Linux 20.1060e / 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105422)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105422 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffe...

SUSE CVE-2026-72443

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints MIDI 2.0 input URBs are started during sndusbmidiv2create. A later setup failure can still jump to sndusbmidiv2free, which currently frees each endpoint and its coheren...

SUSE CVE-2026-72445

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs-opened is set before the serviceinterval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged a...

SUSE CVE-2026-74455

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

USBvalve v1.0.1

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

wifit3 v0.0.5

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...