AutoGadgetFS

Ethereum Donations : 0xA919e40ddB0563918dDc174320D91992e0048477 Table of Contents 1. What's AutoGadgetFS ? 2. Requirments 3. The Setup a. Device testing only b. Minimal agfs in the middle setup c. Complete agfs in the middle setup with debugging support 4. USB Device class support 5. Capabilities...

tap-ducky

TapDucky - Android USB HID Keystroke Injector TapDucky - Android USB HID Keystroke Injector Open-source DuckyScript runner for rooted Android with USB Gadget ConfigFS support TapDucky lets you create, customize, schedule, and run DuckyScript on Android by emulating a USB keyboard, mouse, or...

Chimera

Chimera Hardware Emulation & Proximity Exploitation Why Hak5 gear is heavy and obvious. My phone has a full Linux kernel in it, so I made it do the same job — HID emulation, RNDIS, mass storage, the whole thing — straight through ConfigFS. No extra hardware. No cables dangling out of a bag. Plug...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset causes the device to use the global tagset, whose driverdata remains NULL. Consequently, nullmapqueues falls back to the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg holds a deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute stores with the lock The NULLBDEVICEATTR store takes no lock: applyfn attributes submitqueues, pollqueues get dev-NAME written again after applyfn returns, outside its lock; APPLY=NULL...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix tags leak when shrink nrhwqueues Although we don’t need to reallocate set-tags when shrinking nrhwqueues, we must still free those tags. Otherwise, they may be leaked. How to reproduce: 1. mount -t configfs configfs...

CVE-2026-99206

A flaw was found in the Linux kernel's iSCSI target subsystem. A race condition occurs when concurrent processes update discovery authentication parameters through the configuration filesystem configfs without proper locking. A local user could exploit this vulnerability to trigger a double-free...

SUSE CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

DEBIAN-CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

UBUNTU-CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

EUVD-2026-111958

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146252 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entri...

CLSA-2026-1792749577 kernel: Fix of 97 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 - ipvs: do not...

CVE-2026-98770

A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...

SUSE CVE-2026-98770

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack descriptor array sizes The jack in/out descriptor arrays in struct fmidi2usbconfig have the size of MAXCABLES, which look reasonable -- but it turned out to be incorrect. Namely, the entries for...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142479 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entri...