CVE-2024-26243

CVE-2024-26243 affects the Windows USB Print Driver and is an elevation of privilege vulnerability. The provided details identify the affected component as Windows USB Print Driver, with CVSSv3.1 base metrics: Local access, High impact on confidentiality, integrity, and availability, Attack Compl...

CVE-2024-26243 Windows USB Print Driver Elevation of Privilege Vulnerability

...

CVE-2024-26243 Windows USB Print Driver Elevation of Privilege Vulnerability

...

USN-6701-4: Linux kernel (Azure) vulnerabilities

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 It was discovered that the NVIDIA Tegra...

Windows USB Print Driver Elevation of Privilege Vulnerability

...

Microsoft Windows USB Print Driver 安全漏洞

Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows USB Print Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10...

PT-2024-3004 · Microsoft · Windows Usb Print Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Print Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information...

SUSE-SU-2024:1158-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: - rebui...

Unbreakable Enterprise kernel security update

4.14.35-2047.535.2.1 - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36467681 CVE-2024-1086 4.14.35-2047.535.2 - Fix null ptr in rdstcprecvpath Allison Henderson Orabug: 33499812 - LTS version: v4.14.338 Saeed Mirzamohammadi - crypto: scompress - initialize...

SUSE CVE-2024-26716

In the Linux kernel, the following vulnerability has been resolved: usb: core: Prevent null pointer dereference in updateportdevicestate Currently, the function updateportdevicestate gets the usbhub from udev-parent by calling usbhubtostructhub. However, in case the actconfig or the maxchild is 0...

SUSE CVE-2024-26653

In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function ljcaauxdevrelease calls kfreeauxdev-dev.platformdata to free the parameter data...

Cannot redirect class=02 device from generic USB channel with 'policy restricted' message shown

The class=02 device cannot be redirected from generic USB channel and the 'policy restricted' message is shown on toolbar - device tab, although 'Allow: Class=02' was specified in the 'Client USB device redirection rules' policy and client device registry 'DeviceRules'...

CVE-2024-26716

In the Linux kernel, the following vulnerability has been resolved: usb: core: Prevent null pointer dereference in updateportdevicestate Currently, the function updateportdevicestate gets the usbhub from udev-parent by calling usbhubtostructhub. However, in case the actconfig or the maxchild is 0...

CVE-2024-26715

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...

CVE-2024-26749

A vulnerability was found in the Linux kernel's USB CDNS3 driver, where improper handling of memory in cdns3gadgetepdisable can lead to a use-after-free condition. This issue can allows attackers to exploit freed memory regions, which could result in crashes or arbitrary code execution. Mitigatio...

CVE-2024-26748

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlockdev-lock; 831 usbgadgetgivebackrequestep-endpoint, 832 request; 833 spinlockdev-lock; 834 835 836 if request-buf == privdev-zlpbuf 8...

CVE-2024-26747

In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb role class driver will get usbroleswitch parent's module reference after the user get usbroleswitch device and put the reference after the user...

DEBIAN-CVE-2024-26749

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fixed memory use after free at cdns3gadgetepdisable ... cdns3gadgetepfreerequest&privep-endpoint, &privreq-request; listdelinit&privreq-list; ... 'privreq' actually free at cdns3gadgetepfreerequest. But listdelinit us...

CVE-2024-26747

In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb role class driver will get usbroleswitch parent's module reference after the user get usbroleswitch device and put the reference after the user...

CVE-2024-26749

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fixed memory use after free at cdns3gadgetepdisable ... cdns3gadgetepfreerequest&privep-endpoint, &privreq-request; listdelinit&privreq-list; ... 'privreq' actually free at cdns3gadgetepfreerequest. But listdelinit us...