102 matches found
CVE-2026-98819
A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration DDC records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundaries. An attacker capable of supplying crafted firmware data...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001422)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001422 advisory. In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructe...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Fuse: Abort on fatal signal during sync init When sync init is used and the server exits for some reason e.g., error, crash, the filesystem creation will hang during the processing of FUSEINIT. The reason for this issue is that...
UBUNTU-CVE-2026-1991
A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvcscanstreaming of the file src/device.c of the component UVC Descriptor Handler. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be use...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001374)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001374 advisory. In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001074)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001074 advisory. The wacomprobe function in drivers/input/tablet/wacomsys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service NULL...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001064)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001064 advisory. The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux RHEL 7.1 allows physically proximate...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000876)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000876 advisory. The iowarriorprobe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003206)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003206 advisory. The gtcoprobe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service NULL point...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003071)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003071 advisory. The gtcoprobe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service NULL point...
CVE-2020-12729
MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989980)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989980 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an...
CVE-2025-55098
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiodevicetypeget when parsing a descriptor of an USB audio device...
CVE-2025-55097
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiostreamingsamplingget when parsing a descriptor of an USB streaming device...
CVE-2025-55098 Potential out-of-bounds read in _ux_host_class_audio_device_type_get()
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiodevicetypeget when parsing a descriptor of an USB audio device...
CVE-2025-55098 Potential out-of-bounds read in _ux_host_class_audio_device_type_get()
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiodevicetypeget when parsing a descriptor of an USB audio device...
EUVD-2016-4191
Malware in sbrugna...
EUVD-2016-3270
Malware in sbrugna...