Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the hifusb module not freeing the removeskbs memory when the device is deinitialized or hung, which could le...

PT-2025-41049

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the xhci alloc stream info function within the USB host controller interface of the Linux kernel. The function allocates memory for a stream context array but fai...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987040 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory leak in nfcmrvlplaydeferred Similar to the handling of playdeferred in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414387 advisory. A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414474 advisory. In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to loc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986354 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2hcdinit usbcreatehcd will alloc memory for hcd, and we should...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986942 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check endpoint is valid before dereferencing it When the host controller is not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-386565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386565 advisory. In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986287 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextod...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987358 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the devi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-397380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-397380 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtwwaitfirmwarecompletion', alway...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986531 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' coul...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986724 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Prevent race during ffsep0queuewait While performing fast composition switch,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-404875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-404875 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986977)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986977 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414445 advisory. An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391626)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391626 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: quatech2: fix null-ptr-deref in qt2processreadurb This patch addresses a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986953 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadget panics on 10gbps cabling usbassigndescriptors is called with 5 parameters...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986333)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986333 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usbkillurb by adding memory barriers The syzbot fuzzer has identified a b...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986323 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...