EUVD-2026-15254

In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...

CVE-2026-23312

In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...

UBUNTU-CVE-2026-23290

In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not...

CVE-2026-23365 net: usb: kalmia: validate USB endpoints

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...

CVE-2026-23312 net: usb: kaweth: validate USB endpoints

In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...

CVE-2026-23290 net: usb: pegasus: validate USB endpoints

In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not...

USN-8119-1 systemd vulnerabilities

It was discovered that systemd incorrectly handled certain cgroup paths. A local attacker could possibly use this issue to cause systemd to crash, resulting in a denial of service. CVE-2026-29111 It was discovered that the systemd udev component incorrectly handled certain fields received from th...

CVE-2025-46305

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4. A malicious HID device may cause an unexpected process crash...

CVE-2025-46302

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4. A malicious HID device may cause an unexpected process crash...

PT-2026-7737

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.4 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 macOS Sonoma versions prior to 14.8.4 Description A malicious Human Interface Device HID may cause an unexpected process crash due to insufficient boun...

PT-2026-7733

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.4 macOS versions prior to 15.7.4 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Description A malicious Human Interface Device HID may cause an unexpected process crash due to insufficient bounds...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004088 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2usb.c driver...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003696 advisory. In parsehidreportdescriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004098 advisory. In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004230 advisory. In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000474 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000381 advisory. In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000367 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver...

PT-2026-27730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The kalmia driver does not properly validate the number and types of USB endpoints a device has before binding to it. A malicious device lacking expected USB endpoints can cause the driv...

CVE-2025-43533

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. A malicious HID device may cause an unexpected process crash...