9097 matches found
CVE-2023-53334 USB: chipidea: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved: USB: chipidea: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...
CVE-2023-53334 USB: chipidea: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved: USB: chipidea: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...
CVE-2023-53325
Technical details for CVE-2023-53325 are not provided in the supplied documents. Monitor for updates in connected sources.
AZL-67404 CVE-2025-39805 affecting package kernel for versions less than 6.6.119.3-1
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregisternetdev call order in macbremove When removing a macb device, the driver calls phyexit before unregisternetdev. This leads to a WARN from kernfs: ------------ cut here ------------ kernfs: can not remove...
DEBIAN-CVE-2025-39805
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregisternetdev call order in macbremove When removing a macb device, the driver calls phyexit before unregisternetdev. This leads to a WARN from kernfs: ------------ cut here ------------ kernfs: can not remove...
CVE-2025-39805
CVE-2025-39805 affects the Linux kernel net/macb driver. The issue occurs when removing a macb device: phy_exit() is called before unregister_netdev(), causing a kernfs WARN. The documented fix moves unregister_netdev() ahead of phy_exit() in macb_remove(), preventing the PHY from being exited wh...
udisks: Out-of-bounds read in UDisks Daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...
CVE-2023-53283
The connected PT-2025-37888 vulnerability description indicates a NULL dereference in the Linux kernel’s xen/virtio subsystem during xen dt get node() when a PCI root bus bridge has no parent, occurring in Xen guests using QEMU/KVM with virtio devices (Linux kernel, x86_64). Affected component/fi...
CVE-2023-53273
In the Linux kernel vulnerability CVE-2023-53273, the issue lies in the vmbus driver’s channel handling. The function relid2channel() assumes the vmbus channel array is allocated, but in multi-kernel scenarios (e.g., kdump/kexec), not all relids are reset by the host. If a guest receives a vmbus ...
Security Bulletin: IBM App Connect Enterprise Toolkit and Intregation Bus for z/OS Toolkit are vulnerable to an Origin Validation Error due to Paho Java Client ( CVE-2019-11777 )
Summary IBM App Connect Enterprise Toolkit and Intregation Bus for z/OS Toolkit are vulnerable to an Origin Validation Error due to Paho Java Client. Vulnerability Details CVEID:CVE-2019-11777 DESCRIPTION: In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server...
PT-2025-37878
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The relid2channel function within the vmbus driver makes an assumption about the allocation of the vmbus channel array. Specifically, it assumes the array is allocated when called...
PT-2025-37888
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a vulnerability in the xen/virtio subsystem where a NULL dereference can occur within the xen dt get node function when a bridge of the PCI root bus has no...
Amazon Linux 2 : udisks2, --advisory ALAS2-2025-2992 (ALAS-2025-2992)
The version of udisks2 installed on the remote host is prior to 2.7.3-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2992 advisory. A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is...
Linux Distros Unpatched Vulnerability : CVE-2023-53197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: uhci: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time...
Important: udisks2
Issue Overview: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the...
SUSE CVE-2023-53197
In the Linux kernel, the following vulnerability has been resolved: USB: uhci: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead whi...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
CVE-2022-50297
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. In this case there was an interrupt endpoint where the driver expected a bu...