SUSE-SU-2026:3212-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues Update to version 0.7.9+238+suse.1249506. - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk imagebsc1268145. - kpartx: missing bounds check can lead to a DASD...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of USB in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the USB mechanism of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...

USN-8594-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

USN-8594-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

The vulnerability of the hdm_probe() function in the drivers/most/most_usb.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hdmprobe function in the drivers/most/mostusb.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2026:35832)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:35832 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 crypto/x509: golang: golang crypto/x509: Denial of...

CVE-2026-63962

A flaw was found in the Linux kernel's USB Type-C Port Manager TCPM driver. A remote attacker, acting as a malicious USB-C port partner, could exploit an out-of-bounds write vulnerability in the svdmconsumemodes function. By sending an unsolicited 'Discover Modes ACK' with excessive data, the...

CVE-2026-63959

A flaw was found in the Linux kernel's USB Type-C Universal Serial Bus Type-C subsystem. A malicious or broken USB-C port can transmit a specially crafted data frame that advertises more data objects than it actually contains. This can lead to the system reading from uninitialized memory,...

CVE-2026-63960

A flaw was found in the Linux kernel's USB Type-C WCOVE driver. A malicious USB device could exploit a buffer overflow vulnerability in the wcovereadrxbuffer function. This flaw allows an attacker to write data beyond the intended buffer, potentially corrupting memory on the system's interrupt...

CVE-2026-63958

A flaw was found in the Linux kernel's USB Type-C subsystem. This vulnerability allows a malicious or buggy Power Delivery Microcontroller PPM, such as embedded controller EC firmware or an I2C-attached Universal Serial Bus USB Type-C Connector System Interface UCSI controller, to provide an...

CVE-2026-63906

A flaw was found in the Linux kernel's USB subsystem. Specifically, within the omap2430 driver, a memory resource is prematurely released while still in use, leading to a use-after-free vulnerability. This could allow a local attacker to cause a system crash denial of service or potentially execu...

CVE-2026-63902

A flaw was found in the Linux kernel's cypressm8 USB serial driver. This vulnerability allows a local attacker to cause a denial of service DoS due to an out-of-bounds read. The cypressreadintcallback function does not properly validate the length of interrupt packets, leading to attempts to read...

CVE-2026-63900

A flaw was found in the Linux kernel's USB Keyspan serial driver. This vulnerability stems from a missing sanity check on the size of incoming data transfers for usa49wg indat transfers. This oversight could allow an attacker to cause the system to parse stale or uninitialized memory, potentially...

CVE-2026-63899

A flaw was found in the Linux kernel's USB serial mxuport driver. A malicious Universal Serial Bus USB device could exploit this vulnerability by reporting a bulk-out endpoint maximum packet size smaller than eight bytes. This can lead to user-controlled slab corruption, potentially allowing an...

CVE-2026-63874

A flaw was found in the Linux kernel's USB Management Component Transport Protocol MCTP driver. A race condition exists between the completion of a USB Request Block URB and the cancellation of retry operations during the driver's shutdown process. This timing issue can cause a URB to be re-queue...

SUSE CVE-2026-63894

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: serialize DMABUF cancel against request completion ffsepfiledmabufiocomplete calls usbepfreerequest on the completed request but leaves priv-req, the back-pointer that ffsdmabuftransfer set on submission, pointi...

SUSE CVE-2026-63895

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: copy only received bytes on short ep0 read ffsep0read allocates its control-OUT data buffer with kmalloc not kzalloc at the Length value from the Setup packet, then copies that full len to userspace regardless o...

SUSE CVE-2026-63896

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in WebUSB GETURL handling The WebUSB GETURL handler in compositesetup narrows landingpagelength to fit the host-supplied wLength using landingpagelength = wlength -...

SUSE CVE-2026-63897

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data and leaking it to user space...