21125 matches found
kernel: phy: tegra: xusb: Clear the driver reference in usb-phy dev
In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assign the phy dev to usb-phy dev and use the port dev driver as the dev driver of usb-phy. When we try to destroy the port dev, it will...
kernel: usb: gadget: core: Check for unset descriptor
A flaw was found in the USB gadget core component of the Linux kernel. This vulnerability occurs when a USB gadget does not properly set up its endpoint descriptor or provides malformed descriptors. A local attacker with the ability to connect a specially crafted USB gadget could trigger a null...
kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it ...
kernel: usb: cdc-wdm: close race between read and workqueue
No description is available for this CVE...
kernel: pvrusb2: fix use after free on context disconnection
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2contextthreadfunc function, which may call pvr2contextdestroy and thus call kfree on the context object. However...
kernel: usb: typec: bus: verify partner exists in typec_altmode_attention
A NULL pointer dereference flaw was found in the Linux kernel's USB Type-C subsystem. When certain USB hubs perform a data role swap after entering DisplayPort Alt Mode, all alternate modes are unregistered. If the hub continues sending Attention messages afterward, the typecaltmodeattention...
kernel: usb: udc: remove warning when queue disabled ep
In the Linux kernel, the following vulnerability has been resolved: usb: udc: remove warning when queue disabled ep The Linux kernel CVE team has assigned CVE-2024-35822 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051744-CVE-2024-35822-410b@gregkh/T...
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhcimapurbfordma The Linux kernel CVE team has assigned CVE-2024-26964 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050130-CVE-2024-26964-54c8@gregkh/T...
kernel: usb: typec: ucsi: Limit read size on v1.2
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 The Linux kernel CVE team has assigned CVE-2024-35924 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051914-CVE-2024-35924-90f6@gregkh/T...
kernel: Linux kernel: Denial of Service due to memory leak in mmc: vub300 module
A flaw was found in the Linux kernel's mmc: vub300 module. An incorrect return value check for mmcaddhost and a missing call to mmcfreehost when usbcontrolmsg fails can lead to memory leaks. A local attacker could exploit this vulnerability, causing the kernel to crash and resulting in a Denial o...
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
PT-2024-8153 · Microsoft · Windows Usb Video Class Driver +1
Name of the Vulnerable Software and Affected Versions: Windows USB Video Class Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling the attacker...
PT-2024-8151 · Microsoft · Windows Usb Video Class System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows USB Video Class System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system...
CVE-2024-43638: Out-of-bounds Read
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
PT-2024-8077
Name of the Vulnerable Software and Affected Versions: Windows USB Video Class System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This could allow an attacker to affect the system. There is ...
PT-2024-8076
Name of the Vulnerable Software and Affected Versions: Windows USB Video Class System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no...