67 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb – fix an invalid memory access If the croseckeybregistermatrix function is not called due to “buttonsswitchesonly” in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in...
ROS-20260928-73-0067
The vulnerability of the imxsckeyaction function in the drivers/input/keyboard/imxsckey.c module of the imxsckey keyboard driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to damage memory...
ROS-20260928-73-0068
The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd – Disabling pending work before freeing the device. The lkkbdinterrupt function schedules the lk-tq queue via schedulework. The work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields...
CVE-2026-46213
A flaw was found in the Linux kernel's Apple keyboard driver appletb-kbd. A Use-After-Free UAF vulnerability exists in the inactivity-timer cleanup path during driver tear-down. This can occur due to race conditions between device cleanup and timer operations, or late event callbacks re-arming th...
Linux kernel Keyboard Driver Heap Buffer Overflow DoS
The vulnerability of the gpiokeysquiescekey function in the drivers/input/keyboard/gpiokeys.c file of the Linux kernel’s keyboard support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004160 advisory. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if kascii is called several times in a row, aka...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004261)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004261 advisory. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if kascii is called several times in a row, aka...
SUSE CVE-2025-71073
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...
AZL-74354 CVE-2025-71073 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...
CVE-2025-71073
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...
CVE-2025-71073
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...
UBUNTU-CVE-2025-71073
In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...
CVE-2025-71073
CVE-2025-71073 is addressed in OSV entries showing patches in the Root project: the vulnerability is fixed in the rootio-linux package for Root:Debian:11, Root:Debian:12, Root:Debian:13 and for Root:Ubuntu:22.04 and Root:Ubuntu:24.04, with multiple fixed versions available. The Initial Linux kern...
Linux Distros Unpatched Vulnerability : CVE-2025-71073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkk...
Linux Keyboard Driver Heap Buffer Overflow DoS
The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Input: cros_ec_keyb - fix an invalid memory access
...
Linux Distros Unpatched Vulnerability : CVE-2025-40263
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL...
PT-2025-49093
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur in the cros ec keyb process function when receiving an EC MKBP EVENT KEY MATRIX event. This happens if cros ec...
