CVE-2022-50568

CVE-2022-50568 affects the Linux kernel USB gadget code for f_hidg. The embedded struct cdev’s lifetime was not tied to the enclosing f_hidg, creating a use-after-free if /dev/hidgN is kept open while the gadget is deleted. The fix is to pull the existing device into struct f_hidg and use the cde...

PT-2025-43078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the lifetime management of an embedded cdev structure within the f hidg structure in the Linux kernel. Specifically, the cdev structure's lifetime is not correctly...

PT-2024-10680

Name of the Vulnerable Software and Affected Versions Android versions prior to 8.1.0 Description The issue is related to a possible use-after-free due to improper locking in the f hidg read and hidg disable functions of f hid.c. This could lead to local escalation of privilege with no additional...

PT-2023-33738

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the f hid gadget in the Linux Kernel, specifically concerning the lifetime of f hidg versus cdev. The actual impact and potential for attack have not been proven yet...

PT-2023-34150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the f hid gadget in the Linux Kernel, specifically concerning the lifetime of f hidg versus cdev. The actual impact and attack plausibility have not yet been proven...

PT-2023-34465

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the f hid gadget in the Linux Kernel, specifically concerning the lifetime of f hidg versus cdev. The actual impact and potential for attack have not been proven yet...