CVE-2021-37159: Double Free

hsofreenetdevice in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregisternetdev without checking for the NETREGREGISTERED state, leading to a use-after-free and a double free...

PT-2021-3771

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.13.4 Description The issue is related to the hso free net device function in the Linux kernel's drivers/net/usb/hso.c file, which calls unregister netdev without checking for the NETREG REGISTERED state. This...

CVE-2018-19985

The function hsogetconfigdata in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads ifnum from the USB device as a u8 and uses it to index a small array, resulting in an object out-of-bounds OOB read that potentially allows arbitrary read in the kernel address space...

PT-2018-2700

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.19.9 Description The issue is related to the function hso get config data in the Linux kernel, which reads data from a USB device and uses it to index an array. This can result in an object out-of-bounds read,...

CVE-2017-16649

The usbnetgenericcdcbind function in drivers/net/usb/cdcether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service divide-by-zero error and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16647: NULL Pointer Dereference

drivers/net/usb/asixdevices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16649: Divide By Zero

The usbnetgenericcdcbind function in drivers/net/usb/cdcether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service divide-by-zero error and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-8069

drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

CVE-2017-8068

drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

CVE-2017-8070: Improper Restriction of Operations within the Bounds of a Memory Buffer

drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual page f...

CVE-2017-8068: Improper Restriction of Operations within the Bounds of a Memory Buffer

drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

CVE-2017-8069: Improper Restriction of Operations within the Bounds of a Memory Buffer

drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

PT-2017-1924

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.11 Description The issue is caused by a buffer overflow in the Linux kernel's drivers/net/usb/pegasus.c driver. It can be exploited by a local attacker who interacts incorrectly with the CONFIG VMAP STACK...

PT-2017-1922

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.11 Description The issue is caused by a buffer overflow in the Linux kernel's drivers/net/usb/catc.c driver. It allows a local attacker to cause a denial of service, such as a system crash or memory corruptio...

PT-2017-1923

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x through 4.9.10 Description The issue is caused by incorrect interaction with the CONFIG VMAP STACK option in the drivers/net/usb/rtl8150.c driver, allowing local users to cause a denial of service, such as a system...

CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...

CVE-2016-3951

CVE-2016-3951 concerns a double-free in Linux kernel drivers/net/usb/cdc_ncm.c, exploitable when a USB device with an invalid descriptor is inserted. Affected: Linux kernel pre-4.5; impact: denial of service (system crash) and potential unspecified effects. The linked Unity security advisories co...

CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...

CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...

PT-2016-5776

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description A double free vulnerability in the Linux kernel allows physically proximate attackers to cause a denial of service, potentially leading to a system crash, by inserting a USB device with an invalid...