SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 Missing Authentication Check in SAP Solution Manager This script allows to check and exploit missing authentication checks in SAP EEM servlet tcsmdagentapplicationeem that lead to RCE on SAP SMDAgents connected to SAP Solution Manager Original finding: Pablo Artuso Yvan 'igg...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak When usbnet transmits a skb, it is fixed via eemtxfixup. If skbcopyexpand fails, it returns NULL; consequently, usbnetstartxmit has no chance to free the original skb. The fix involves freeing t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: usb: gadget: feem: Fixed a memory leak in eemunwrap. The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improved error handling to free all allocated...

SAP Solution Manager EEM RCE (CVE-2020-6207)

Exploits CVE-2020-6207 missing authentication on /EemAdminService/EemAdmin to upload an AssignJS EEM script and execute self.payload on a connected SAP Diagnostics Agent via Rhino/Java Runtime. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Solution Manager EEM servlet RCE CVE-2020-6207 — rever...

Linux USB gadget driver Heap Buffer Overflow DoS

The vulnerability of the eemunwrap function in the drivers/usb/gadget/function/feem.c file of the Linux operating system’s USB gadget driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

SAP Solution Manager 7.2 - Remote Command Execution Detection

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011344 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013060 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case...

SUSE CVE-2025-68289

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on...

usb: gadget: f_eem: Fix memory leak in eem_unwrap

...

CVE-2025-68289

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on...

CVE-2025-68289

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on...

UBUNTU-CVE-2025-68289

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on...

CVE-2025-68289 usb: gadget: f_eem: Fix memory leak in eem_unwrap

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on...

CVE-2025-68289

In CVE-2025-68289, the Linux kernel USB gadget subsystem (usb: gadget: f_eem) is affected. The issue stems from improper handling of a failure case in usb_ep_queue within the eem_unwrap command path, which could lead to memory leaks. The provided impact details show kmemleak-detected unreferenced...

CVE-2025-68289 usb: gadget: f_eem: Fix memory leak in eem_unwrap

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mishandling of the eemunwrap error, which could lead to a memory leak...

Linux Distros Unpatched Vulnerability : CVE-2025-68289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: feem: Fix memory leak in eemunwrap The existing code did not handle the failure case of usbepqueue in the command path, potentially leading to memo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989911 advisory. In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if...

PT-2025-51693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the f eem module within the gadget subsystem, specifically in the eem unwrap function. The existing code lacked proper error handling for usb e...