6 matches found
EUVD-2026-48884
In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconnect race mutexunlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12 U...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000551 advisory. The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted U...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003190)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003190 advisory. The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted U...
SUSE CVE-2017-15102
The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted USB device to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer...
Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-34131)
The Linux Kernel is the kernel of the Linux operating system. Linux kernel has a local elevation of privilege vulnerability in the legousbtower driver. An attacker can exploit the vulnerability to cause a null pointer indirect reference with elevation of privilege...
DEBIAN-CVE-2017-15102
The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted USB device to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer...