CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

CVE-2026-74680

A flaw was found in the Linux kernel's cxacru USB ATM driver. When the cxacrucm function encounters an error, it fails to properly terminate an already submitted receive USB Request Block URB. This oversight can lead to the driver attempting to resubmit an active URB, which triggers a warning in...

SUSE CVE-2026-68370

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared usbrequest dum-fiforeq that the "emulated single-request FIFO" fast-path in dummyqueue reuses for small IN transfers: it copies the...

PT-2026-81541

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs if the attacker has already compromised the...

The vulnerability of the check_command_size_inblocks() function in the drivers/usb/gadget/function/f_mass_storage.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the as102_usb_probe() function in the drivers/media/usb/as102/as102_usb_drv.c driver for Linux-based USB multimedia devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ncm_unwrap_ntb() function in the driver/usb/gadget/function/f_ncm.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ncmunwrapntb function in the driver/usb/gadget/function/fncm.c file of the Linux device driver framework is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions usb6fire_chip_abort() and usb6fire_chip_disconnect() in the sound/usb/6fire/chip.c module of the Linux kernel’s sound subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions usb6firechipabort and usb6firechipdisconnect in the sound subsystem of the Linux operating system’s kernel lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the kaweth_probe() function in the drivers/net/usb/kaweth.c module of the Linux network adapter driver allows a hacker to cause a service failure.

The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the gadget_unbind_driver() function in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the gadgetunbinddriver function in the drivers/usb/gadget/udc/core.c file of the Linux USB device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the pn_rx_complete() function in the drivers/usb/gadget/function/f_phonet.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the pnrxcomplete function in the drivers/usb/gadget/function/fphonet.c file of the Linux USB device driver module is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the em28xx_v4l2_open() function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the em28xxv4l2open function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the usbip_pack_ret_submit() function in the drivers/usb/usbip/usbip_common.c file of the Linux operating system’s device driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbippackretsubmit function in the drivers/usb/usbip/usbipcommon.c file of the Linux device driver module is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the `prepare_playback_urb()` function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the prepareplaybackurb function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the hackrf_probe() function in the drivers/media/usb/hackrf/hackrf.c driver for multimedia devices of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hackrfprobe function in the drivers/media/usb/hackrf/hackrf.c driver for Linux multimedia devices is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

PT-2026-81771

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

The vulnerability of the `ucan_read_bulk_callback()` function in the `drivers/net/can/usb/ucan.c` file of the Linux kernel’s CAN network device driver allows a attacker to cause a service failure.

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the kalmiabind() function in the drivers/net/usb/kalmia.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the kalmiabind function in the drivers/net/usb/kalmia.c module of the Linux USB network adapter driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the aqc111_suspend() function in the drivers/net/usb/aqc111.c module of the Linux kernel’s USB network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the aqc111suspend function in the drivers/net/usb/aqc111.c module of the Linux USB network adapter driver leads to mutual locking. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the cdc_ncm_rx_verify_ndp16() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp16 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver relates to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...