Phoenix Contact FL SWITCH 安全漏洞

The PHOENIX CONTACT FL SWITCH is an industrial grade Ethernet switch from PHOENIX CONTACT, Germany. A security vulnerability exists in Phoenix Contact FL SWITCH versions prior to 3.50, which originates from an undocumented UART port and could result in gaining root access...

PT-2025-49639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the dln2 probe function within the kernel's MFD Multiple Function Device driver for DLN2 devices. Specifically, when dln2 setup rx urbs fails during the probe...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-storage alauda not verifying the USB transfer state, which could lead to the use of uninitialized data...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

CVE-2025-48625

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48625

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

...

EUVD-2023-60060

In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fix out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmapaddirqchipfwnode, the intent is to allocate a matrix with numconfigbases rows and...

DEBIAN-CVE-2022-50625

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: avoid SBSA UART accessing DMACR register Chapter "B Generic UART" in "ARM Server Base System Architecture" 1 documentation describes a generic UART interface. Such generic UART does not support DMA. In current...

CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

CVE-2023-53761 USB: usbtmc: Fix direction for 0-length ioctl control messages

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

CVE-2023-53758

The CVE-2023-53758 issue concerns the Linux kernel driver for the Atmel QuadSPI (spi: atmel-quadspi). The vulnerability arises when an early error path in atmel_qspi_remove() unbinds the device without properly freeing resources, leaving the SPI controller with an unbound parent and unmapped regi...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

Barix Instreamer 安全漏洞

Barix Instreamer is an audio encoding device from the Swiss company Barix. A security vulnerability exists in Barix Instreamer v04.06 and earlier versions, which originates from the presence of stored cross-site scripting in the Web UI I/O and Serial Configuration pages...

Vulnerability of the set_flicker() function in the drivers/media/usb/gspca/cpia1.c module – The driver for supporting multimedia devices via USB in Linux systems, which can be exploited by attackers to cause service failures.

Vulnerability of the setflicker function in the drivers/media/usb/gspca/cpia1.c module – The Linux kernel’s USB multimedia device driver relies on the ability to perform operations beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the kalmia_send_init_packet() function in the drivers/net/usb/kalmia.c module – The driver for supporting USB network adapters in Linux kernels allows a hacker to cause a service failure.

Vulnerability of the kalmiasendinitpacket function in the drivers/net/usb/kalmia.c module – The Linux USB device driver framework is vulnerable due to the lack of protection against uninitialized pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-49589

Name of the Vulnerable Software and Affected Versions Barix Instreamer versions prior to 04.07 Description The software contains a Cross Site Scripting XSS issue within the Web UI. Specifically, the I/O & Serial configuration page’s CTS close command user-input field is affected. This field store...

PT-2025-49582

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...