CVE-2026-74682: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urbpacks; u-buffersize = maxsize u-packets; if fmt-fmttype ==...

CVE-2026-74677: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrierwork UAF on disconnect iphethsndbulkcallback re-arms the carrier-check work on any non-zero URB status: else scheduledelayedwork&dev-carrierwork, 0; Nothing ties that to the interface being up, so the...

PT-2026-79683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ax88179 178a USB network driver when the interface has NETIF F SG enabled. If the skb linearize function fails within the ax88179 tx fixup function, the syste...

Linux Distros Unpatched Vulnerability : CVE-2026-74678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: ax88179178a: fix skb leak in ax88179txfixup When the interface has NETIFFSG enabled and skblinearize fails in ax88179txfixup, the function returns NUL...

CVE-2026-74642: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...

CVE-2026-74679: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Use unsigned int for ndpindex The variable ndpindex is declared as a signed integer, but it stores the return value of getncm, which is unsigned. A malicious host can supply a large offset that overflows the...

Linux Distros Unpatched Vulnerability : CVE-2026-74680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the...

Linux Distros Unpatched Vulnerability : CVE-2026-74677

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: ipheth: fix carrierwork UAF on disconnect iphethsndbulkcallback re-arms the carrier-check work on any non-zero URB status: else...

PT-2026-79684

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb gadget f ncm module where the ndp index variable is declared as a signed integer despite storing an unsigned return value from the get ncm function. A maliciou...

CVE-2026-74457

A flaw was found in the Linux kernel's peakusb module. A malicious USB device could send a specially crafted payload, leading to a heap out-of-bounds read. This vulnerability can cause a kernel panic, resulting in a Denial of Service DoS for the affected system...

CVE-2026-74441

A flaw was found in the Linux kernel's USB Type-C UCSI driver. This vulnerability arises from a timing issue during the unregistration of USB Type-C ports, where certain operations can race against the destruction of internal work queues. A local attacker could exploit this race condition to...

CVE-2026-74502

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability, a double free error, occurs when handling legacy raw MIDI Musical Instrument Digital Interface conversions. Specifically, an error during the initialization of a USB...

Chromium: CVE-2026-76044 Race condition in USB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-68231

In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

SUSE CVE-2026-76044

Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102034 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102048 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102037 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen,...

ROS-20260821-73-0020

The vulnerability of the tegraxusbpadctlgetusb3companion function in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102086 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it i...