SUSE CVE-2026-74455

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

USBvalve v1.0.1

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

wifit3 v0.0.5

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

The vulnerability of the wdm_in_callback() function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the gncmbind() function in the drivers/usb/gadget/legacy/ncm.c module of the Linux USB device driver allows a hacker to cause a service failure.

The vulnerability of the gncmbind function in the drivers/usb/gadget/legacy/ncm.c module of the Linux USB device driver lies in the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the geth_allocinst() function in the drivers/usb/gadget/function/fsubset.c module of the Linux operating system’s USB device driver allows a attacker to cause a service failure.

The vulnerability of the gethallocinst function in the drivers/usb/gadget/function/fsubset.c file of the Linux USB device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-80596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was...

Linux Distros Unpatched Vulnerability : CVE-2026-80659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001459 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca usb: musb: sunxi:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001485 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001499 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd The cmd variable can be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001501 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The devdbg&urb-dev-dev, ... which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001460 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface Among the attribute file callback routines in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001456 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never...

SUSE CVE-2026-80596

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was converted to use the driver core to instantiate device attributes via .devgroups in the usbdriver structure, the attributes started appearing ...

SUSE CVE-2026-80659

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...

Chromium: CVE-2026-79211 Incorrect authorization in USB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78911 Incorrect authorization in USB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-80659

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...