SUSE CVE-2026-68374

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously freed in usbresetandverifydevice, a function that is commonly called i...

SUSE CVE-2026-68456

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; so, if the device is unplugged...

PT-2026-81541

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs if the attacker has already compromised the...

CVE-2026-79211: Incorrect Authorization

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78911: Incorrect Authorization

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-81771

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

The vulnerability of the cdc_ncm_rx_verify_ndp16() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp16 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver relates to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the ncm_unwrap_ntb() function in the driver/usb/gadget/function/f_ncm.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ncmunwrapntb function in the driver/usb/gadget/function/fncm.c file of the Linux device driver framework is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities in the functions gserial_disconnect() and gserial_resume() of the driver module drivers/usb/gadget/function/u_serial.c of the Linux operating system’s USB device drivers allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions gserialdisconnect and gserialresume in the driver module drivers/usb/gadget/function/userial.c of the Linux operating system’s USB device drivers is related to the pointer reallocation due to concurrent access to resources race condition. Exploiting this...

The vulnerability of the mcba_usb_probe() function in the drivers/net/can/usb/mcba_usb.c file of the Linux kernel’s network device support driver allows a hacker to cause a service failure.

The vulnerability of the mcbausbprobe function in the drivers/net/can/usb/mcbausb.c file of the Linux network device driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the usbip_pack_ret_submit() function in the drivers/usb/usbip/usbip_common.c file of the Linux operating system’s device driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbippackretsubmit function in the drivers/usb/usbip/usbipcommon.c file of the Linux device driver module is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the kaweth_probe() function in the drivers/net/usb/kaweth.c module of the Linux network adapter driver allows a hacker to cause a service failure.

The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the kalmiabind() function in the drivers/net/usb/kalmia.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the kalmiabind function in the drivers/net/usb/kalmia.c module of the Linux USB network adapter driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pn533_usb_disconnect() function in the drivers/nfc/pn533/usb.c module of the Linux kernel NFC driver allows a hacker to cause a service failure.

The vulnerability of the pn533usbdisconnect function in the NFC driver/nfc/pn533/usb.c module of the Linux operating system’s kernel is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the `ucan_read_bulk_callback()` function in the `drivers/net/can/usb/ucan.c` file of the Linux kernel’s CAN network device driver allows a attacker to cause a service failure.

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the gadget_unbind_driver() function in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the gadgetunbinddriver function in the drivers/usb/gadget/udc/core.c file of the Linux USB device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gs_usb_receive_bulk_callback() function in the drivers/net/can/usb/gs_usb.c file of the Linux kernel’s CAN network device driver allows a hacker to induce a service failure.

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the aqc111_suspend() function in the drivers/net/usb/aqc111.c module of the Linux kernel’s USB network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the aqc111suspend function in the drivers/net/usb/aqc111.c module of the Linux USB network adapter driver leads to mutual locking. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the check_command_size_inblocks() function in the drivers/usb/gadget/function/f_mass_storage.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the hackrf_probe() function in the drivers/media/usb/hackrf/hackrf.c driver for multimedia devices of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hackrfprobe function in the drivers/media/usb/hackrf/hackrf.c driver for Linux multimedia devices is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...