GSD-2022-1006663 xhci: Remove device endpoints from bandwidth list when freeing the device

xhci: Remove device endpoints from bandwidth list when freeing the device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35222 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the xhci component, specifically concerning the removal of device endpoints from the bandwidth list when freeing the device. The actual impact and attack plausibilit...

PT-2022-35811 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.298 Description: The issue is related to the removal of device endpoints from the bandwidth list when freeing the device. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-35885 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.332 Description: The issue is related to the removal of device endpoints from the bandwidth list when freeing the device. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35727 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue is related to the xhci component, specifically concerning the removal of device endpoints from the bandwidth list when freeing the device. The actual impact and attack plausibili...

PT-2022-35610

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.223 Description A potential issue exists where device endpoints are not properly removed from the bandwidth list when a device is freed. The actual impact and attack plausibility have not yet been proven...

PT-2022-35442

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.153 Description The issue is related to the removal of device endpoints from the bandwidth list when freeing a device. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-34918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to the removal of device endpoints from the bandwidth list when freeing a device. The actual impact and attack plausibility have not yet been proven. Recommendations For...

The Reciprocal Value of Access to Maintainers

Last May I left Google to build a more sustainable model for Open Source maintenance. After a summer break, I resumed my maintenance work on the Go project in September, and I started offering my services to companies that rely on Go. My vision is that of Open Source maintenance as a real...

PT-2025-40657

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of device endpoints within the xhci driver. Specifically, the issue arises when freeing a virtual device, potentially leading to...

September 20, 2022—KB5017381 (OS Build 20348.1070) Preview

None None...

Promiscous VLAN Tag Drops: Cause, Symptoms, and Solution

The counter nicerrvlanpromisctagdrops is incrementing. This may also cause performance issues and/or exceed the limits of a bandwidth license, triggering packet loss...

PT-2025-25921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue occurs when a disk is removed, and the bdi unregister function is called to stop further writeback and wait for associated delayed work to complete. The wb inode...

CVE-2022-32030

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand...

Malicious code in orchid-bandwidth-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d250ee542e6dad39facbe71433ee1ce4d8dae88930886fb5011b4310640410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5119 Malicious code in orchid-bandwidth-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d250ee542e6dad39facbe71433ee1ce4d8dae88930886fb5011b4310640410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30913

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqossetbandwidth parameter at /goform/aspForm...

CVE-2022-30913

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqossetbandwidth parameter at /goform/aspForm...

PT-2022-20373

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005 Description A stack overflow issue was discovered via the ipqos set bandwidth parameter at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R100 version R100V100R005, consider restricting...

Zoho ManageEngine Netflow Analyzer Professional跨站脚本漏洞

ZOHO ManageEngine Netflow Analyzer is a web-based bandwidth monitoring tool from ZOHO, Inc. A cross-site scripting vulnerability exists in ZOHO ManageEngine Netflow Analyzer Professional version 7.0.0.2, which stems from the lack of proper validation of client-side data by the web application and...