android-gadget

android-gadget 摘要 Android 使用的某些 Linux 内核版本受到 CVE-2021-39685 问题的影响。有关 CVE-2021-39685 的详细信息和 POC 可在 inspector-gadget 仓库中找到。 本仓库包含了针对多个 Android 特定 USB gadget 的 POC，包括： faccessory faudiosource fgsi fmtp fqcrndis frmnet 描述 a faccessory 在 composite.c 中分配的 EP0 缓冲区大小为 USBCOMPEP0BUFSIZ 4096 字节 函数的控制传输处理程序...

CVE-2026-31720

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: validate control request size faudiocomplete copies req-length bytes into a 4-byte stack variable: u32 data = 0; memcpy&data, req-buf, req-length; req-length is derived from the host-controlled USB reque...

PT-2026-36355

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the f audio complete function. The issue occurs because the function copies req-length bytes into a 4-byte stack variable using memcpy. Since...