Lucene search
K

15 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core from accessing an invalid event buffer address This commit addresses a issue where the USB core might access an invalid event buffer address during runtime suspension, potentially causing SMMU...

5.5CVSS6.3AI score0.00013EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990852)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990852 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an...

5.5CVSS6.4AI score0.00013EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/09/17 11:31 p.m.1 views

SUSE CVE-2022-50357

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3getproperties function calls: dwc-usbpsy = powersupplygetbynameusbpsyname; so there is some additional clean up required on these error paths...

5.5CVSS6.6AI score0.00017EPSS
Exploits0References5
NVD
NVD
added 2025/09/17 3:15 p.m.4 views

CVE-2022-50357

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3getproperties function calls: dwc-usbpsy = powersupplygetbynameusbpsyname; so there is some additional clean up required on these error paths...

5.5CVSS0.00017EPSS
Exploits0References3
CVE
CVE
added 2025/09/17 2:56 p.m.22 views

CVE-2022-50357

CVE-2022-50357 concerns the Linux kernel’s USB dwc3 core. The vulnerability arises in the dwc3_get_properties() path where the code does: dwc->usb_psy = power_supply_get_by_name(usb_psy_name); and, on error, there is insufficient cleanup on those paths, allowing leaks. Several connected adviso...

5.5CVSS6.2AI score0.00017EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/09/17 2:56 p.m.5 views

CVE-2022-50357 usb: dwc3: core: fix some leaks in probe

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3getproperties function calls: dwc-usbpsy = powersupplygetbynameusbpsyname; so there is some additional clean up required on these error paths...

0.00017EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/09/17 2:56 p.m.2 views

CVE-2022-50357

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3getproperties function calls: dwc-usbpsy = powersupplygetbynameusbpsyname; so there is some additional clean up required on these error paths...

5.5CVSS5.3AI score0.00017EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.2 views

kernel: usb: dwc3: core: Prevent USB core invalid event buffer address access

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and othe...

5.5CVSS6.6AI score0.00013EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.0 views

PT-2024-35534

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.8 Description A fault in the Linux kernel has been resolved, specifically in the dwc3 component, which occurs when the system is suspended and the device was already runtime suspended. This issue prevents...

5.5CVSS6.7AI score0.00033EPSS
Exploits0
OSV
OSV
added 2024/09/13 6:15 a.m.1 views

DEBIAN-CVE-2024-46675

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and othe...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2024/07/29 5:15 p.m.1 views

DEBIAN-CVE-2024-42085

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock When config CONFIGUSBDWC3DUALROLE is selected, and trigger system to enter suspend status with below command: echo mem /sys/power/state There...

5.5CVSS5.4AI score0.00017EPSS
Exploits0References1
Prion
Prion
added 2024/02/27 7:4 p.m.15 views

Spoofing

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

7AI score0.00018EPSS
Exploits0References4
OSV
OSV
added 2024/02/27 7:4 p.m.0 views

UBUNTU-CVE-2021-46941

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

5.5CVSS6.2AI score0.00018EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.1 views

PT-2022-35060 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to some leaks in the probe function of the dwc3 core in the Linux Kernel's USB component. The actual impact and attack plausibility have not yet been proven...

7.2AI score
Exploits0References1
OSV
OSV
added 2021/06/30 12:33 a.m.8 views

GSD-2021-1001009 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

7.1AI score
Exploits0
Rows per page
Query Builder