17825 matches found
CLSA-2025-1742806909 kernel: Fix of 37 CVEs
HID: core: zero-initialize the report buffer CVE-2024-50302 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - bus: mhi: host: Add alignment check for event ring read pointer CVE-2023-52494 - net: sched: fix ets qdisc OOB Indexing CVE-2025-21692 - parport: Proper fix for...
CVE-2025-26500
: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...
CVE-2025-26500 VxWorks 7 USB Failure
: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...
CVE-2025-26500 VxWorks 7 USB Failure
: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...
CVE-2025-26500
CVE-2025-26500 affects Wind River VxWorks 7 (versions 22.06–24.03). The issue is an Uncontrolled Resource Consumption (Excessive Allocation) caused by specially crafted USB packets that can render the system unavailable. Affected component: USB handling within VxWorks 7; root cause described as e...
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238729...
Wind River Systems VxWorks 安全漏洞
Wind River Systems VxWorks is an embedded real-time operating system from Wind River Systems USA. It is used in communications, military, aerospace, and other real-time demanding applications. A security vulnerability exists in Wind River Systems VxWorks 7 versions 22.06 through 24.03, which stem...
The vulnerability of the svdm_consume_identity() function in the drivers/usb/typec/tcpm/tcpm.c kernel module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the svdmconsumeidentity function in the drivers/usb/typec/tcpm/tcpm.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Azure Linux 3.0 Security Update: kernel (CVE-2024-56629)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56629 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name...
Multiple vulnerabilities in home gateway HGW-BL1500HM
Overview Home gateway HGW-BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. Stored cross-site scripting in the NickName registration screen CWE-79 - CVE-2025-27567 Stored cross-site scripting in the USB storage file-sharing function CWE-79 - CVE-2025-27574 Path...
CLSA-2025-1742322442 kernel: Fix of 5 CVEs
HID: core: zero-initialize the report buffer CVE-2024-50302 - Revert "drm/amdgpu: add missing size check in amdgpudebugfsgprwaveread" - drm/amd/amdgpu: Fix GPR read from debugfs v2 CVE-2024-50282 - USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - wifi: iwlegacy: Clear...
CLSA-2025-1742319829 Fix of 27 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neighperiodicwork CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211getstation CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma...
Vulnerability of the ucsi_unregister_altmodes() function in the drivers/usb/typec/ucsi/ucsi.c module – This driver supports the USB Type-C interface of the Linux kernel, and can be exploited by attackers to cause service failures.
Vulnerability of the ucsiunregisteraltmodes function in the drivers/usb/typec/ucsi/ucsi.c module – The driver that supports the USB Type-C interface for the Linux kernel is vulnerable to out-of-buffer reading attacks. Exploiting this vulnerability could allow an attacker to cause system failures...
Linux ax88179_rx_fixup() Out-Of-Bounds Access
drivers/net/usb/ax88179178a.c contains multiple out-of-bounds accesses in ax88179rxfixup, the function responsible for taking a buffer received over USB and splitting it up into ethernet packets...
CVE-2025-24987
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...
CVE-2025-24055
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...
CVE-2025-24988
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...
USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
...