CVE-2026-64340

A flaw was found in the Linux kernel's legousbtower USB driver. This vulnerability is a use-after-free, which means the system attempts to use memory after it has been released. It occurs due to a timing issue race condition when a USB device is disconnected, potentially leading to system...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000551 advisory. The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted U...

Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-34131)

The Linux Kernel is the kernel of the Linux operating system. Linux kernel has a local elevation of privilege vulnerability in the legousbtower driver. An attacker can exploit the vulnerability to cause a null pointer indirect reference with elevation of privilege...

DEBIAN-CVE-2017-15102

The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted USB device to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer...