Lucene search
+L

18083 matches found

CVE
CVE
added 2026/08/22 3:32 p.m.28 views

CVE-2026-74642

CVE-2026-74642 is a Use-After-Free (UAF) vulnerability in the Linux kernel's ALSA USB subsystem , specifically in the handling of MIDI 2.0 (UMP) endpoints . A prior fix for a UAF in ump_to_endpoint() inadvertently introduced a second UAF: the code dereferences the UMP endpoint object in a delayed...

5.5AI score0.00168EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.24 views

CVE-2026-74642 ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...

0.00168EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/22 3:32 p.m.20 views

CVE-2026-74639

CVE-2026-74639 is a use-after-free in the Linux kernel's ALSA us144mkii driver (Tascam US-144MKII USB audio interface). The root cause is that capture_urb_complete() resubmits capture URBs without re-anchoring them. Since anchoring is a property of a submission (not the URB itself), the anchor be...

5.7AI score0.00166EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/22 3:32 p.m.20 views

CVE-2026-74639 ALSA: us144mkii: re-anchor capture URBs on resubmission

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission captureurbcomplete resubmits each capture URB without anchoring it: usbgeturburb; ret = usbsubmiturburb, GFPATOMIC; Anchoring is a property of a submission, not of the URB...

5.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.24 views

CVE-2026-74639 ALSA: us144mkii: re-anchor capture URBs on resubmission

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission captureurbcomplete resubmits each capture URB without anchoring it: usbgeturburb; ret = usbsubmiturburb, GFPATOMIC; Anchoring is a property of a submission, not of the URB...

0.00166EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-74682

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter:...

5.3AI score0.00177EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the...

5.5AI score0.00177EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-74642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint...

6.3AI score0.00168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-74677

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: ipheth: fix carrierwork UAF on disconnect iphethsndbulkcallback re-arms the carrier-check work on any non-zero URB status: else...

6.3AI score0.00168EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.22 views

PT-2026-79687

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data ep set params sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urb packs; u-buffer size = maxsize u-packets; if fmt-fmt...

5.8AI score0.00177EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.22 views

PT-2026-79683

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179 178a: fix skb leak in ax88179 tx fixup When the interface has NETIF F SG enabled and skb linearize fails in ax88179 tx fixup, the function returns NULL without freeing the skb. usbnet start xmit treats a NULL...

5.3AI score0.00479EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.17 views

PT-2026-79647

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump to endpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...

5.4AI score0.00168EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.18 views

PT-2026-79684

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f ncm: Use unsigned int for ndp index The variable ndp index is declared as a signed integer, but it stores the return value of get ncm, which is unsigned. A malicious host can supply a large offset that overflows th...

5.4AI score0.00185EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.22 views

PT-2026-79644

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission capture urb complete resubmits each capture URB without anchoring it: usb get urburb; ret = usb submit urburb, GFP ATOMIC; Anchoring is a property of a submission, not of th...

5.5AI score0.00166EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-74679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fncm: Use unsigned int for ndpindex The variable ndpindex is declared as a signed integer, but it stores the return value of getncm, which is...

6.3AI score0.00185EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-74678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: ax88179178a: fix skb leak in ax88179txfixup When the interface has NETIFFSG enabled and skblinearize fails in ax88179txfixup, the function returns NUL...

7.5CVSS5.4AI score0.00479EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/21 11:32 a.m.8 views

CVE-2026-74457

A flaw was found in the Linux kernel's peakusb module. A malicious USB device could send a specially crafted payload, leading to a heap out-of-bounds read. This vulnerability can cause a kernel panic, resulting in a Denial of Service DoS for the affected system...

5.5CVSS5.2AI score0.00177EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 9:45 a.m.11 views

CVE-2026-74441

A flaw was found in the Linux kernel's USB Type-C UCSI driver. This vulnerability arises from a timing issue during the unregistration of USB Type-C ports, where certain operations can race against the destruction of internal work queues. A local attacker could exploit this race condition to...

7CVSS5.7AI score0.00173EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 8:30 a.m.17 views

CVE-2026-74502

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Universal MIDI Packet UMP driver. This vulnerability, a double free error, occurs when handling legacy raw MIDI Musical Instrument Digital Interface conversions. Specifically, an error during the initialization of a USB...

7CVSS5.5AI score0.00168EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/08/21 5:10 a.m.22 views

Chromium: CVE-2026-76044 Race condition in USB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.3AI score0.00387EPSS
SaveExploits0
Rows per page
Query Builder