The vulnerability of the `usb_get_bos_descriptor()` function in the drivers/usb/core/config.c file of the Linux kernel allows a hacker to gain access to confidential data.

The vulnerability of the usbgetbosdescriptor function in the drivers/usb/core/config.c file of the Linux kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to access confidential data...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

BOS IPCs SQL注入漏洞

BOS IPCs is a family of sensors from BOS. A SQL injection vulnerability exists in versions prior to BOS IPCs 21.45.8.2.3230220, which stems from improper handling of the request body and could lead to SQL injection...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

CVE-2025-48735

CVE-2025-48735 concerns BOS IPCs where firmware before 21.45.8.2.3_230220 is vulnerable to a SQL injection in the request body processing. The affected component is the BOS IPCs firmware stack (versions from 21.45.8.2.2_220219 up to, but not including, 21.45.8.2.3_230220). The root cause is impro...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

PT-2025-22820 · Bos Ipcs · Bos Ipcs

Name of the Vulnerable Software and Affected Versions: BOS IPCs versions 21.45.8.2.2 220219 through 21.45.8.2.2 220219 Description: A SQL Injection issue in the request body processing allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8940 Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-52886

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an out-of-bounds read in sysfs.c:readdescriptors: BUG: KASAN: slab-out-of-bounds in readdescriptors+0x263/0x280 drivers/usb/core/sysfs.c:883 Re...

kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6868-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6868-1 advisory. Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Bran...

kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...

kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1788)

"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1800)

"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a...

SUSE CVE-2023-52781

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...

CVE-2023-52781

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...

DEBIAN-CVE-2023-52781

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...