PT-2025-10832

Name of the Vulnerable Software and Affected Versions Windows USB Video Class System Driver affected versions not specified Description The issue is an out-of-bounds read in the Windows USB Video Driver, allowing an authorized attacker to elevate privileges with a physical attack. Recommendations...

PT-2025-10833

Name of the Vulnerable Software and Affected Versions Windows USB Video Class System Driver affected versions not specified Description The issue is an out-of-bounds read in the Windows USB Video Driver, allowing an authorized attacker to elevate privileges with a physical attack. Recommendations...

kernel security update

5.14.0-503.31.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CVE-2025-24988: Out-of-bounds Read

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

PT-2025-10807 · Microsoft · Windows Usb Video Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Video Driver affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information, requiring a physical attack. Recommendations: At the moment, there is no...

CVE-2025-24987: Out-of-bounds Read

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24055: Out-of-bounds Read

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...

kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...

kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...

kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56698)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56698 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued...

Linux Distros Unpatched Vulnerability : CVE-2024-38567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports 1 hitting a warning which is caused by presence of a wrong endpoint type at the URB...

Azure Linux 3.0 Security Update: kernel (CVE-2024-53150)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53150 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53150)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53150 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads...

SUSE CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

OESA-2025-1245 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufxusbprobe I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP:...

CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

DEBIAN-CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

DEBIAN-CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...