PT-2025-12456

Name of the Vulnerable Software and Affected Versions Wind River Systems VxWorks 7 versions 22.06 through 24.03 Description The issue is related to Uncontrolled Resource Consumption, allowing Excessive Allocation in VxWorks 7. Specifically crafted USB packets may lead to the system becoming...

Wind River Systems VxWorks 安全漏洞

Wind River Systems VxWorks is an embedded real-time operating system from Wind River Systems USA. It is used in communications, military, aerospace, and other real-time demanding applications. A security vulnerability exists in Wind River Systems VxWorks 7 versions 22.06 through 24.03, which stem...

CVE-2025-26500: Uncontrolled Resource Consumption

: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...

PT-2025-16691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A problem in the Linux kernel has been identified where disconnecting the agilent usb dongle causes subsequent calls to the driver to result in a NULL dereference Oops. This occurs becau...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56629)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56629 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name...

The vulnerability of the svdm_consume_identity() function in the drivers/usb/typec/tcpm/tcpm.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the svdmconsumeidentity function in the drivers/usb/typec/tcpm/tcpm.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-16692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A problem in the Linux kernel has been identified where disconnecting a USB dongle leads to a NULL dereference Oops due to the bus interface being set to NULL. This issue arises because...

Multiple vulnerabilities in home gateway HGW-BL1500HM

Overview Home gateway HGW-BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. Stored cross-site scripting in the NickName registration screen CWE-79 - CVE-2025-27567 Stored cross-site scripting in the USB storage file-sharing function CWE-79 - CVE-2025-27574 Path...

CLSA-2025-1742322442 kernel: Fix of 5 CVEs

HID: core: zero-initialize the report buffer CVE-2024-50302 - Revert "drm/amdgpu: add missing size check in amdgpudebugfsgprwaveread" - drm/amd/amdgpu: Fix GPR read from debugfs v2 CVE-2024-50282 - USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - wifi: iwlegacy: Clear...

CLSA-2025-1742319829 Fix of 27 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neighperiodicwork CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211getstation CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma...

Vulnerability of the ucsi_unregister_altmodes() function in the drivers/usb/typec/ucsi/ucsi.c module – This driver supports the USB Type-C interface of the Linux kernel, and can be exploited by attackers to cause service failures.

Vulnerability of the ucsiunregisteraltmodes function in the drivers/usb/typec/ucsi/ucsi.c module – The driver that supports the USB Type-C interface for the Linux kernel is vulnerable to out-of-buffer reading attacks. Exploiting this vulnerability could allow an attacker to cause system failures...

PT-2025-16579

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc6+ Description A slab-use-after-free issue has been identified in the Linux kernel, specifically in the rtsx usb ms driver. This issue can cause a crash when the rtsx usb ms poll card function is called...

Linux ax88179_rx_fixup() Out-Of-Bounds Access

drivers/net/usb/ax88179178a.c contains multiple out-of-bounds accesses in ax88179rxfixup, the function responsible for taking a buffer received over USB and splitting it up into ethernet packets...

CVE-2025-24987

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24055

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...

CVE-2025-24988

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

usbnet: ipheth: use static NDP16 location in URB

...

usbnet: ipheth: fix DPE OoB read

...

USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()

...

PT-2025-20533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel's USB gadget functionality, specifically in the ast vhub init dev function. The variable d-name, returned by devm...