Lucene search
K

21 matches found

Cvelist
Cvelist
added 2026/05/01 2:14 p.m.23 views

CVE-2026-31721 usb: gadget: f_hid: move list and spinlock inits from bind to alloc

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: move list and spinlock inits from bind to alloc There was an issue when you did the following: - setup and bind an hid gadget - open /dev/hidg0 - use the resulting fd in EPOLLCTLADD - unbind the UDC - bind the...

0.00015EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.4 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper timing of list initialization and spinlock operations in fhid, potentially leading to li...

5.5CVSS5.8AI score0.00015EPSS
Exploits0References1
OSV
OSV
added 2026/04/24 3:16 p.m.1 views

DEBIAN-CVE-2026-31606

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: don't call cdevinit while cdev in use When calling unbind, then bind again, cdevinit reinitialized the cdev, even though there may still be references to it. That's the case when the /dev/hidg device is still...

5.5CVSS5.3AI score0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/24 2:42 p.m.0 views

CVE-2026-31606

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: don't call cdevinit while cdev in use When calling unbind, then bind again, cdevinit reinitialized the cdev, even though there may still be references to it. That's the case when the /dev/hidg device is still...

5.4AI score0.00015EPSS
Exploits0References6Affected Software1
SUSE CVE
SUSE CVE
added 2025/10/07 11:49 p.m.2 views

SUSE CVE-2022-50514

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

5.5CVSS6.5AI score0.00017EPSS
Exploits0References7
OSV
OSV
added 2025/10/07 4:15 p.m.0 views

UBUNTU-CVE-2022-50514

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References10
Cvelist
Cvelist
added 2025/10/07 3:19 p.m.4 views

CVE-2022-50514 usb: gadget: f_hid: fix refcount leak on error path

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

0.00017EPSS
Exploits0References7
CVE
CVE
added 2025/10/07 3:19 p.m.7 views

CVE-2022-50514

CVE-2022-50514 concerns the Linux kernel’s usb gadget f_hid path. The vulnerability arises from a refcount leak on the error path when report_desc allocation fails: opts->refcnt has already been incremented and must be decremented to avoid leaving the options structure permanently locked. The ...

5.5CVSS6.1AI score0.00017EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2025/10/07 3:19 p.m.2 views

CVE-2022-50514

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented so it needs to be decremented to avoid leaving the options structure permanently locked...

5.5CVSS5.2AI score0.00017EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-5901

Malware in sbrugna...

5.5CVSS6.5AI score0.00063EPSS
Exploits0References12
OSV
OSV
added 2023/01/17 7:9 p.m.6 views

GSD-2023-1001388 usb: gadget: f_hid: fix f_hidg lifetime vs cdev

usb: gadget: fhid: fix fhidg lifetime vs cdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2023/01/17 7:9 p.m.4 views

GSD-2023-1001386 usb: gadget: f_hid: fix refcount leak on error path

usb: gadget: fhid: fix refcount leak on error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2023/01/17 6:35 p.m.8 views

GSD-2023-1001073 usb: gadget: f_hid: fix f_hidg lifetime vs cdev

usb: gadget: fhid: fix fhidg lifetime vs cdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2023/01/17 6:35 p.m.4 views

GSD-2023-1001071 usb: gadget: f_hid: fix refcount leak on error path

usb: gadget: fhid: fix refcount leak on error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2023/01/17 5:56 p.m.6 views

GSD-2023-1000661 usb: gadget: f_hid: fix f_hidg lifetime vs cdev

usb: gadget: fhid: fix fhidg lifetime vs cdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2023/01/17 5:55 p.m.10 views

GSD-2023-1000658 usb: gadget: f_hid: fix refcount leak on error path

usb: gadget: fhid: fix refcount leak on error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2020/03/28 2:4 p.m.33 views

CVE-2019-14763

A vulnerability was found in the Linux kernel when using the "Synopsys DesignWare Core SuperSpeed USB 3.0 Controller", where a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid...

6.2CVSS4.2AI score0.00063EPSS
Exploits0References8
Prion
Prion
added 2019/08/07 10:15 p.m.18 views

Double free

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid...

4.9CVSS6.7AI score0.00063EPSS
Exploits0References9Affected Software2
CVE
CVE
added 2019/08/07 9:50 p.m.170 views

CVE-2019-14763

CVE-2019-14763 affects the Linux kernel prior to 4.16.4, where a double-locking error in drivers/usb/dwc3/gadget.c may deadlock with f_hid. Exploitation context from connected Nessus advisories links CVE-2019-14763 to kernel fixes (4.16.4) and security advisories (e.g., USN/EulerOS entries). The ...

5.5CVSS6.6AI score0.00063EPSS
Exploits0References9Affected Software1
Debian CVE
Debian CVE
added 2019/08/07 9:50 p.m.24 views

CVE-2019-14763

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid...

5.5CVSS6.2AI score0.00063EPSS
Exploits0
Rows per page
Query Builder