7617 matches found
The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xhciwrite64 function in the drivers/usb/host/xhci.h module of the Linux device support driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...
The vulnerability in the isp116xremove() function of the drivers/usb/host/isp116x-hcd.c driver module allows a malicious actor to cause a service failure.
The vulnerability of the isp116xremove function in the drivers/usb/host/isp116x-hcd.c file of the Linux kernel’s USB device support driver is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005804)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005804 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3qcomprobe allocates memory for resource...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005676)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005676 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...
CVE-2026-20024
creationtimestamp| type| source ---|---|--- 2026-03-04 20:01:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb36nesvn2u...
USN-8070-3: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...
ROS-20260304-73-0017
A vulnerability in the usbhsprobe function of the usb component of the Linux operating system kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005606)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005606 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...
ROS-20260304-73-0033
A vulnerability in the sndusbgetaudioformatuac3 sound/usb/stream.c function of the Linux kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
kernel: media: rc: fix races with imon_disconnect()
A use-after-free flaw exists in the Linux kernel’s media/rc subsystem. When the device is disconnected via imondisconnect, the driver may unconditionally release a usbdevice reference via usbputdev even while other operations such as vfdwrite, sendpacket, displayopen, lcdwrite are still in...
kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing
A flaw was found in the Linux kernel's USB core configuration parsing. Specifically, the usbparsessendpointcompanion function incorrectly checks the descriptor type before its length, which can lead to reading data beyond the intended buffer. This out-of-bounds read vulnerability could allow a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005596)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005596 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are...
RHEL 9 : kernel-rt (RHSA-2026:3375)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3375 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
CVE-2026-26699
creationtimestamp| type| source ---|---|--- 2026-03-02 18:10:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3u2d4ws72x...
Zyxel EX3510-B0 UPnP command injection vulnerability
The Zyxel EX3510-B0 is a Gigabit Ethernet switch produced by Zyxel Technology. The Zyxel EX3510-B0 UPnP device has a command injection vulnerability related to UPnP SOAP requests. This vulnerability stems from incorrect filtering of input parameters, allowing remote attackers to execute arbitrary...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005557)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005557 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udfgetfileshortad Check for overflow when computing alen in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005553)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005553 advisory. In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member uzonesize of struct...
CVE-2026-3387
creationtimestamp| type| source ---|---|--- 2026-03-01 13:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyvieffpk2e...
CVE-2026-3277
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
