Lucene search
+L

13957 matches found

EUVD
EUVD
โ€ขadded 2026/07/19 2:55 p.m.โ€ข15 views

EUVD-2026-45701

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

5.6AI score0.00216EPSS
SaveExploits0References8
Debian CVE
Debian CVE
โ€ขadded 2026/07/19 2:55 p.m.โ€ข7 views

CVE-2026-63928

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

5.4AI score0.00216EPSS
SaveExploits0
CVE
CVE
โ€ขadded 2026/07/19 2:55 p.m.โ€ข25 views

CVE-2026-63928

The CVE-2026-63928 entry concerns the Linux kernel USB serial omninet driver. The issue is a memory corruption risk when handling a small endpoint: bulk-out buffers must be at least as large as the hardcoded transfer size to prevent userโ€‘controlled slab corruption if a malicious device reports a ...

5.6AI score0.00216EPSS
SaveExploits0References8
OSV
OSV
โ€ขadded 2026/07/19 2:55 p.m.โ€ข11 views

CVE-2026-63928 USB: serial: omninet: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

5.5AI score
SaveExploits0References11
EUVD
EUVD
โ€ขadded 2026/07/19 2:55 p.m.โ€ข14 views

EUVD-2026-45673

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

5.4AI score0.00211EPSS
SaveExploits0References8
CVE
CVE
โ€ขadded 2026/07/19 2:55 p.m.โ€ข24 views

CVE-2026-63900

CVE-2026-63900 concerns the Linux kernel USB serial driver for Keyspan devices (usa49wg). The vulnerability was a missing sanity check on the size of indat transfers, which could allow parsing of stale or uninitialised slab data. The issue has been addressed by adding the missing sanity check to ...

5.4AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
โ€ขadded 2026/07/19 2:55 p.m.โ€ข7 views

CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

5.3AI score
SaveExploits0References11
Cvelist
Cvelist
โ€ขadded 2026/07/19 2:55 p.m.โ€ข32 views

CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

0.00211EPSS
SaveExploits0References8
OSV
OSV
โ€ขadded 2026/07/19 2:55 p.m.โ€ข7 views

CVE-2026-63898 USB: serial: mct_u232: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

5.5AI score
SaveExploits0References11
EUVD
EUVD
โ€ขadded 2026/07/19 2:55 p.m.โ€ข11 views

EUVD-2026-45671

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

5.6AI score0.00211EPSS
SaveExploits0References8
Cvelist
Cvelist
โ€ขadded 2026/07/19 2:55 p.m.โ€ข35 views

CVE-2026-63898 USB: serial: mct_u232: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
โ€ขadded 2026/07/19 2:55 p.m.โ€ข8 views

CVE-2026-63898

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

5.4AI score0.00211EPSS
SaveExploits0
CVE
CVE
โ€ขadded 2026/07/19 2:55 p.m.โ€ข21 views

CVE-2026-63898

In the Linux kernel USB serial stack, the mct_u232 driver could override the maximum transfer size for a device that only accepts 16-byte packets on its 32-byte bulk-out endpoint, risking slab corruption if a smaller endpoint max packet size was reported. The vulnerability is addressed by ensurin...

5.6AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
โ€ขadded 2026/07/19 2:55 p.m.โ€ข8 views

CVE-2026-63897 USB: serial: mct_u232: fix missing interrupt-in transfer sanity check

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data and leaking it to user space...

5.3AI score
SaveExploits0References11
CVE
CVE
โ€ขadded 2026/07/19 2:55 p.m.โ€ข25 views

CVE-2026-63897

The CVE-2026-63897 entry concerns the Linux kernel USB serial driver mct_u232. A missing sanity check on the size of interrupt-in transfers could allow parsing of stale or uninitialised slab data, potentially leaking kernel data to user space. The vulnerability is addressed by kernel fixes that a...

5.4AI score0.00211EPSS
SaveExploits0References8
Cvelist
Cvelist
โ€ขadded 2026/07/19 2:55 p.m.โ€ข39 views

CVE-2026-63897 USB: serial: mct_u232: fix missing interrupt-in transfer sanity check

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data and leaking it to user space...

0.00211EPSS
SaveExploits0References8
EUVD
EUVD
โ€ขadded 2026/07/19 2:55 p.m.โ€ข13 views

EUVD-2026-45670

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data and leaking it to user space...

5.3AI score0.00211EPSS
SaveExploits0References8
Cvelist
Cvelist
โ€ขadded 2026/07/19 2:55 p.m.โ€ข34 views

CVE-2026-63895 usb: gadget: f_fs: copy only received bytes on short ep0 read

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: copy only received bytes on short ep0 read ffsep0read allocates its control-OUT data buffer with kmalloc not kzalloc at the Length value from the Setup packet, then copies that full len to userspace regardless o...

0.00244EPSS
SaveExploits0References7
Debian CVE
Debian CVE
โ€ขadded 2026/07/19 2:18 p.m.โ€ข8 views

CVE-2026-63874

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...

7.8CVSS5.2AI score0.00119EPSS
SaveExploits0
OSV
OSV
โ€ขadded 2026/07/19 3:48 a.m.โ€ข8 views

OESA-2026-3043 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Exposure of Sensitive Information to an Unauthorized...

8.8CVSS6.1AI score0.00497EPSS
SaveExploits0References11
Rows per page
Query Builder