cve-2019-6260

A Test and Debug Tool for ASPEED BMC AHB Interfaces Warning DO NOT USE THIS TOOL IF YOU HAVE NOT UNDERSTOOD ITS BEHAVIOURS IN THE CONTEXT OF YOUR TARGET MACHINE. This tool pokes at low-level hardware and firmware interfaces of your machine. Particularly, the act of probing implies uncertainty abo...

CVE-2023-40289

CVE-2023-40289 This is an exploit for CVE-2023-40289, a command injection vulnerability in several Baseband Management Controllers BMC by with firmware by ATEN. Examples of affected devices include Aspeed's AST2300 or AST2500, which can be found on Supermicro's X10 and X11 series server systems,...

CVE-2026-93118

A flaw was found in the Linux kernel's USB gadget driver for Aspeed UDC. During the device initialization process, a failure to allocate a Direct Memory Access DMA buffer is not properly handled. This can lead to the driver attempting to use an invalid memory address, potentially causing a system...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the aspeedtachvaltorpm function in the drivers/hwmon/aspeed-g6-pwm-tach.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

SUSE CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

DEBIAN-CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

AZL-109023 CVE-2026-98766 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

EUVD-2026-103851

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

The Linux kernel contains a use-after-free vulnerability in the usb: gadget: aspeed-vhub component. The root cause is that wake_work is armed during the .wakeup callback but is not cancelled in ast_vhub_remove(), potentially allowing a work item to execute after the vhub and its ports are freed b...

CVE-2026-98766 usb: gadget: aspeed-vhub: cancel wake work on device removal

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766 usb: gadget: aspeed-vhub: cancel wake work on device removal

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

PT-2026-116985

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wake work is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in ast vhub remove, so a work item queued before or...

CVE-2026-98766: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

Linux Distros Unpatched Vulnerability : CVE-2026-98766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 1600x900 When displaying in 1600x900 resolution, the system may crash if system memory usage is tight. How to reproduce this issue: 1. Use 1600x900 to display on the host. 2. Mount...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeedudc: validate endpoint index for ast udc We should verify the bounds of the array to ensure that the host cannot manipulate the index to point beyond the endpoint array. Found via static analysis...