CVE-2025-21073

Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989868)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989868 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989887 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for USB Type-C device While design wise the idea of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988969 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled When only PHY1 is used for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989571 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port A pending hrtime...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990089 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: Also search for 'phys' phandle When passing 'phys' in the devicetree to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989141 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2hcdinit usbcreatehcd will alloc memory for hcd, and we should...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989065 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci-plat: fix crash when suspend if remote wake enable Crashed at i.mx8qm platform when...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990104 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvcfunctionsetup permit...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989496 advisory. In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR Nov-2025 Release 1, which stems from the presence of an insecure default configuration for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988906 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ffs: Fix use-after-free for epfile Consider a case where ffsfuncepsdisable is called from...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988905 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 usb: musb: musbdsps: requestirq aft...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989187 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a minor b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989585 advisory. In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver probes two USB...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989800 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: common: usb-conn-gpio: fix NULL pointer dereference of charger When power on system with OTG...

CVE-2024-56426

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target...

CVE-2024-56426

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target...

CVE-2024-56426

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target...

SAMSUNG多款产品 安全漏洞

SAMSUNG Exynos 980 and others are products of the South Korean company Samsung SAMSUNG.SAMSUNG Exynos 980 is a first 5G integrated Soc product and the world's first A77 architecture processor.SAMSUNG Exynos 990 is a mobile processor.SAMSUNG Exynos 850 is a mobile SAMSUNG Exynos 850 is a mobile...