141 matches found
CVE-2026-98148
A flaw was found in the Linux kernel's Generic USB Display GUD driver. This vulnerability can lead to a Denial of Service DoS if an attacker connects a malicious USB display device to the system. The driver fails to verify that the default display rotation capability is present in the device's...
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
CVE-2026-68368
A flaw was found in the Linux kernel's USB gadget NCM Network Control Model driver. This vulnerability occurs because the driver fails to properly validate the boundaries of datagrams and Network Transfer Blocks NTBs supplied by a USB host. A malicious USB host can exploit this by crafting specif...
CVE-2025-49010
A flaw was found in OpenSC, an open source smart card tools and middleware. An attacker with physical access to the computer, at the time a user or administrator uses a token, can exploit this vulnerability. By presenting specially crafted responses to Application Protocol Data Units APDUs from a...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38348)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38348 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003831)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003831 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003606)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003606 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004398)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004398 advisory. In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003749)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003749 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2usb.c driver...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003882)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003882 advisory. An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in th...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003808)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003808 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004146)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004146 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb....
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003989)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003989 advisory. In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcbausb.c driver, aka...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000264)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000264 advisory. In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000198)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000198 advisory. In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka...
CVE-2025-61661 Grub2: grub2: out-of-bounds write via malicious usb device
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
EUVD-2019-9144
Malware in sbrugna...
EUVD-2019-9147
Malware in sbrugna...