Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the usb cdns3 gadget driver not checking when the ep-desc pointer is null in the epqueue, which could result...

The vulnerabilities of the functions cdns3_gadget_ep_enable() and cdns3_gadget_ep_dequeue() in the drivers/usb/cdns3/cdns3-gadget.c driver module of the Linux operating system’s USB device drivers allow a malicious actor to cause service failures.

The vulnerability of the cdns3gadgetepenable and cdns3gadgetepdequeue functions in the drivers/usb/cdns3/cdns3-gadget.c driver for USB device drivers in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cdns3_allocate_trb_pool() function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdns3allocatetrbpool function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `cdns3_wa2_remove_old_request()` function in the `drivers/usb/cdns3/cdns3-gadget.c` driver for USB device drivers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdns3wa2removeoldrequest function in the drivers/usb/cdns3/cdns3-gadget.c device driver of the Linux operating system’s USB device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260202-73-0027

A vulnerability in the cdns3 component of the Linux operating system kernel is associated with a hang due to resource re-blocking. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37812)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37812 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992790 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixe...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993122)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993122 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3 fix use-after-free at workaround 2 BUG: KFENCE: use-after-free read in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993039 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'privep' assignment in cdns3gadgetepdequeue, cdns3gadgetepenable If...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992452)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992452 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3 fix use-after-free at workaround 2 BUG: KFENCE: use-after-free read in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992595 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'privep' assignment in cdns3gadgetepdequeue, cdns3gadgetepenable If...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992657)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992657 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixe...

CVE-2025-40314

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

SUSE CVE-2025-40314

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

CVE-2025-40314

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

DEBIAN-CVE-2025-40314

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

CVE-2025-40314

Technical details for CVE-2025-40314 are not publicly provided in the supplied Connected documents. No explicit affected product/version or remediation is present here. Monitor for updates from official advisories.

CVE-2025-40314

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

CVE-2025-40314 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

Linux Distros Unpatched Vulnerability : CVE-2025-40314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget...