130 matches found
kernel: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq
In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @sharedhcd to NULL before decrease the usage count by usbputhcd, this will cause the shared hcd not released...
QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750)
This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750...
kernel: usb: xhci_plat_remove: avoid NULL dereference
In the Linux kernel, the following vulnerability has been resolved: usb: xhciplatremove: avoid NULL dereference Since commit 4736ebd7fcaff1eb8481c140ba494962847d6e0a "usb: host: xhci-plat: omit shared hcd if either root hub has no ports" xhci-sharedhcd can be NULL, which causes the following Oops...
SUSE CVE-2021-38204
drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service use-after-free and panic by removing a MAX-3421 USB device in certain situations...
GSD-2023-1000989 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq
usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...
GSD-2023-1000554 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq
usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
The vulnerability of the dwc2handle_packet function in the hw/usb/hcd-dwc2.c component of the hardware/USB/HCD-DWC2 emulator for QEMU allows a hacker to trigger a service failure.
The vulnerability of the dwc2handlepacket function in the hw/usb/hcd-dwc2.c component of the QEMU hardware emulation software is related to the lack of checks for division by zero. Exploiting this vulnerability allows a perpetrator to cause a system failure...
PT-2022-33520 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.29 through 5.19.1 Description: A refcount leak was discovered in the ehci hcd ppc of probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 2.6....
The vulnerability in the hw/usb/hcd-ohci.c component of the QEMU hardware emulation software allows a malicious actor to trigger a service failure by executing a loop with an unavailable exit condition.
The vulnerability in the component hw/usb/hcd-ohci.c is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drivers/usb/host/max3421-hcd.c component of the Linux operating system’s kernel lies in the use of memory after it is freed, allowing an attacker to trigger a service failure.
The vulnerability of the Linux operating system’s driver/usb/host/max3421-hcd.c component is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
UBUNTU-CVE-2021-38204
drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service use-after-free and panic by removing a MAX-3421 USB device in certain situations...
PT-2021-1516 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.6 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the drivers/usb/host/max3421-hcd.c component. This vulnerability can be exploited by physically...
SUSE: Security Advisory (SUSE-SU-2021:1244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Use-After-Free
QEMU 5.0.0 has a use-after-free. The vulnerability exists in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked which allows an attacker to cause an application crash...
QEMU Reuse After Release Vulnerability
QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. QEMU has a security vulnerability that originates from hw/usb/hcd-ehci.c that forces the use of a freed memory area to trigge...
QEMU infinite loop vulnerability
QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. An infinite loop vulnerability exists in hw/usb/hcd-ohci.c in QEMU 5.0.0 when the TD list has a loop. An attacker can exploit this...
CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
DEBIAN-CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
