CVE-2023-54270 media: usb: siano: Fix use after free bugs caused by do_submit_urb

In the Linux kernel, the following vulnerability has been resolved: media: usb: siano: Fix use after free bugs caused by dosubmiturb There are UAF bugs caused by dosubmiturb. One of the KASan reports is shown below: 36.403605 BUG: KASAN: use-after-free in workerthread+0x4a2/0x890 36.406105 Read o...

CVE-2023-54266 media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920xi2cxfer 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920xread call fail...

CVE-2022-50829

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: Fix use-after-free in ath9khifusbregincb It is possible that skb is freed in ath9khtcrxmsg, then usbsubmiturb fails and we try to free skb again. It causes use-after-free bug. Moreover, if allocskb fails,...

CVE-2022-50829

The CVE-2022-50829 entry concerns the Linux kernel wireless driver ath9k (hif_usb path). The issue is a use-after-free: skb could be freed in ath9k_htc_rx_msg(), then usb_submit_urb() fails and the code attempts to free skb again. There can also be a memory leak if alloc_skb() fails, leaving urb-...

CVE-2022-50829 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: Fix use-after-free in ath9khifusbregincb It is possible that skb is freed in ath9khtcrxmsg, then usbsubmiturb fails and we try to free skb again. It causes use-after-free bug. Moreover, if allocskb fails,...

CVE-2023-54186 usb: typec: altmodes/displayport: fix pin_assignment_show

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

CVE-2023-54186

CVE-2023-54186 is a Linux kernel vulnerability affecting the USB Type-C altmodes/displayport code. The issue arises from a patch that fixes the negative indexing of the buf array in pin_assignment_show when get_current_pin_assignments returns 0 (no compatible pin assignments). The bug led to a KA...

CVE-2022-50825

CVE-2022-50825 relates to a Linux kernel USB Type-C wusb3801 refcount leak in the wusb3801_probe path. The vulnerability arises from unbalanced of_node_get()/of_node_put() calls, described as a memory leak if wusb3801_hw_init() fails, where fwnode_handle_put() must be invoked to avoid the leak. C...

CVE-2022-50825

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...

CVE-2022-50825 usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...

OESA-2025-2884 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with start/stop bug, one without were seen to...

Exploit for Improper Access Control in Microsoft

CVE-2025-47962-POC Reproduction process： i686-w64-mingw32-gcc...

PT-2025-54095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a potential memory leak within the m920x i2c xfer function. Specifically, memory associated with read may be freed incorrectly when it is NUL...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992328 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in astvhubinitdesc We should call ofnodeput for the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992352 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in sndcardregiste...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992379 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992307 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uaudio: don't let userspace block driver unbind In the unbind callback for fuac1 and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992297 advisory. In the Linux kernel, the following vulnerability has been resolved: media: mceusb: Use new usbcontrolmsg routines Automatic kernel fuzzing led to a WARN about invali...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992280 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in astvhubinitdev The variable d-name, returned by...