9097 matches found
ALSA: usb-audio: Kill timer properly at removal
...
CVE-2025-36907
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
...
usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
...
usb: gadget : fix use-after-free in composite_dev_cleanup()
...
phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
...
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
...
PT-2025-35890
Name of the Vulnerable Software and Affected Versions: abl affected versions not specified Description: A heap buffer overflow exists in the draw surface image function within abl/android/lib/draw/draw.c. This issue may lead to local escalation of privilege via USB fastboot after a bootloader...
PT-2025-35942
Name of the Vulnerable Software and Affected Versions: Tesla Model 3 versions 2023.Xx through 2023.43 Description: Securing externally available CAN wires can easily allow physical access to the CAN bus, potentially enabling the injection of specially formed CAN messages to control remote start...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-audio not validating the length of the UAC3 power domain descriptor, which could lead to out-of-bounds...
PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
...
scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
...
Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
...
scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
...
gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
...
CVE-2023-21473
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
CVE-2023-21473
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
CVE-2023-21472
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port disable sysfs attribute The Linux kernel CVE team has assigned CVE-2024-26933 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26933-c18d@gregkh/T...
udisks: Out-of-bounds read in UDisks Daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...