CVE-2026-68374

The CVE-2026-68374 entry concerns the Linux kernel USB core: sysfs bos_descriptors_read(). The root cause is missing synchronization around udev->bos, which can be freed concurrently by usb_reset_and_verify_device() invoked by drivers across the kernel, creating a use-after-free condition. Imp...

CVE-2026-68374 usb: core: sysfs: add lock to bos_descriptors_read()

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously freed in usbresetandverifydevice, a function that is commonly called i...

CVE-2026-68374 usb: core: sysfs: add lock to bos_descriptors_read()

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously freed in usbresetandverifydevice, a function that is commonly called i...

EUVD-2026-55560

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously freed in usbresetandverifydevice, a function that is commonly called i...

PT-2026-69774

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the USB core sysfs implementation. The function bos descriptors read accesses the udev-bos variable without proper synchronization. This variable can be...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1788)

"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1800)

"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a...

OESA-2024-1621 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Harden accesses to the reset domains Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset...

CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

CVE-2023-52477 usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

CVE-2023-52477 usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing access to uninitialized BOS descriptors...