24 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64233
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for...
UBUNTU-CVE-2026-64346
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadgetmatchdriver The udc structure acts as the management structure for the gadget, but their lifecycles are decoupled. A race condition exists where usbdelgadget frees the udc memory e.g....
CVE-2026-64346
Summary: CVE-2026-64346 affects the Linux kernel USB gadget udc path. A race condition can occur when the udc (managing gadget state) is freed by usb_del_gadget() while gadget_match_driver() may still access the freed udc (e.g., via configfs). This Use-After-Free can trigger a NULL pointer derefe...
CVE-2026-64233
In the Linux kernel, a race was fixed in the USB gadget uvc driver. The function uvc_function_bind() previously walked opts->extension_units without holding opts->lock, both directly for the iExtension string-descriptor fixup and indirectly via uvc_copy_descriptors() across speeds. The fix ...
CVE-2026-64233 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four times...
PT-2026-64348
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the uvc function bind function where the opts-lock is not held while walking &opts-extension units. This occurs directly during the iExtension string-descriptor fixup...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: configfs: A race condition in configfs,unregistersubsystem has been fixed. When configfsregistersubsystem or configfsunregistersubsystem executes linkgroup or unlinkgroup, it is possible for two processes to add or delete element...
SUSE CVE-2026-43342
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This...
CVE-2026-43342
A flaw was found in the Linux kernel's USB gadget RNDIS Remote Network Driver Interface Specification function. This vulnerability arises from race conditions when RNDIS options are accessed concurrently through configfs, a file system that allows user-space programs to create and manage kernel...
EUVD-2026-28626
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This...
UBUNTU-CVE-2026-43423
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-43342
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This...
CVE-2026-43342 usb: gadget: f_rndis: Protect RNDIS options with mutex
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This...
CVE-2026-43342
CVE-2026-43342 concerns the Linux kernel USB gadget RNDIS driver (f_rndis). The issue arises from race conditions when RNDIS options (class/subclass/protocol) are accessed concurrently via configfs, enabling unsafe concurrent access. The remediation implemented is to protect these options using a...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of mutual exclusion protection for class/subclass/protocol options in USB Gadget FRNDIS...
MiracleLinux 4 : kernel-2.6.32-642.4.2.el6 (AXSA:2016-679:07)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-679:07 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...
SUSE CVE-2025-68319
In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...
CVE-2025-68319
In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987277)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987277 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs,unregistersubsystem When configfsregistersubsystem or...