Lucene search
K

26 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.8 views

Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: HID: logitech-hidpp: Fixed a kernel crash when the USB connection is disconnected. The function hidppconnectevent experiences four times-of-check versus-time-of-use TOCTOU races. This race occurs when hidppconnectevent is...

4.7CVSS6.6AI score0.00006EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/05/07 2:17 a.m.4 views

SUSE CVE-2026-43136

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors and can define report structures without valid fields. This can be...

5.7AI score0.00013EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/05/06 6:23 p.m.4 views

CVE-2026-43136

A flaw was found in the Linux kernel's Human Interface Device HID subsystem, specifically within the logitech-hidpp driver. A remote attacker, by connecting a specially crafted Universal Serial Bus USB device, could send malformed HID report descriptors that lack valid fields. This could lead to ...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References4
NVD
NVD
added 2026/05/06 12:16 p.m.1 views

CVE-2026-43136

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors and can define report structures without valid fields. This can be...

5.5CVSS0.00013EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2026/05/06 11:27 a.m.1 views

CVE-2026-43136

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors and can define report structures without valid fields. This can be...

5.5CVSS5.7AI score0.00013EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/05/06 11:27 a.m.6 views

CVE-2026-43136

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors and can define report structures without valid fields. This can be...

5.7AI score0.00013EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2026/05/06 11:27 a.m.22 views

CVE-2026-43136 HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors and can define report structures without valid fields. This can be...

0.00013EPSS
Exploits0References8
CVE
CVE
added 2026/05/06 11:27 a.m.4 views

CVE-2026-43136

The CVE-2026-43136 issue affects the Linux kernel HID subsystem (logitech-hidpp) where fake USB devices could craft HID report descriptors without valid fields, potentially crashing the kernel over USB. The root cause is a missing validation in hidpp_get_report_length() that allowed reports with ...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.3 views

PT-2026-37476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hidpp get report length function within the logitech-hidpp module. The system fails to properly check the maxfield variable when a report contains no fields. This...

5.5CVSS5.4AI score0.00013EPSS
Exploits0References18
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-43136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/06 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of checking of certain fields in the HID logitech-hidpp protocol. This vulnerability cou...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-43049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force feedback initialisation fails when probing the...

7.8CVSS5.7AI score0.00015EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/05/01 6:39 p.m.3 views

CVE-2026-43049

A flaw was found in the Linux kernel's logitech-hidpp driver. When the force feedback initialization fails for the Logitech G920 Driving Force Racing Wheel, the driver returns an error before properly tearing down userspace infrastructure. This can lead to a use-after-free UAF vulnerability if...

7.8CVSS6AI score0.00015EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/05/01 2:15 p.m.3 views

CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force feedback initialisation fails when probing the Logitech G920 Driving Force Racing Wheel for Xbox One, an error number wi...

7.8CVSS5.7AI score0.00015EPSS
Exploits0
Cvelist
Cvelist
added 2026/05/01 2:15 p.m.28 views

CVE-2026-43049 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force feedback initialisation fails when probing the Logitech G920 Driving Force Racing Wheel for Xbox One, an error number wi...

0.00015EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/01 2:15 p.m.2 views

CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force feedback initialisation fails when probing the Logitech G920 Driving Force Racing Wheel for Xbox One, an error number wi...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to properly clean up the userspace infrastructure when force-feed initialization fails in the...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/08 2:26 p.m.6 views

Security Bulletin: IBM Guardium Data Protection is affected by kernel vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2023-52478 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidppconnectevent has...

5.5CVSS6.7AI score0.00021EPSS
Exploits0Affected Software1
Redos
Redos
added 2024/10/04 12:0 a.m.8 views

ROS-20241004-08

A vulnerability in the logitech-hidpp component of the Linux operating system kernel is related to a kernel crash when disconnecting the USB receiver. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

4.7CVSS6.8AI score0.00006EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/09/24 12:40 a.m.1 views

kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

A flaw was found in the Linux kernel. This issue can cause a potential crash on the receiver USB disconnect...

4.7CVSS6.6AI score0.00006EPSS
Exploits0References5
Rows per page
Query Builder