The vulnerability of the cdc_ncm_rx_verify_ndp32() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp32 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver is related to errors in calculating the data buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the cdc_ncm_check_tx_max() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the cdcncmchecktxmax function in the drivers/net/usb/cdcncm.c module of the Linux network adapter driver framework is related to a violation of the data format agreement. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002886)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002886 advisory. Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash ...

SUSE CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...