kernel: USB: gadget: Fix use-after-free Read in usb_udc_uevent()

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usbudcuevent The syzbot fuzzer found a race between uevent callbacks and gadget driver unregistration that can cause a use-after-free bug:...

SUSE CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

PT-2025-38388

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the USB gadget pxa25x udc driver when using the debugfs lookup function. Failing to call dput on the result of debugfs lookup leads to a memory leak over time. Th...

PT-2022-33157

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.285 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-33206

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.320 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32556

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.6...

PT-2022-33018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.5 through 5.4.199 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.5 through...

PT-2022-32755

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-33098

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32906

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.5 through 5.10.123 Description A refcount leak was discovered in the lpc32xx udc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.5 through...

PT-2025-25906

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc4-next-20220628-syzkaller Description A use-after-free bug was found in the Linux kernel, specifically in the usb udc uevent function. This bug occurs due to a race between uevent callbacks and gadget...

CVE-2022-0902

CVE-2022-0902 affects ABB Totalflow flow computers and remote controllers (RMC-100 Standard/LITE, XIO, XFCG5, XRCG5, uFLOG5, UDC). The issue combines path traversal and command-injection vulnerabilities in the proprietary Totalflow TCP protocol, allowing a remote attacker to insert and run arbitr...

Out-of-bound Reads

linux is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/udc/udc-xilinx.c because the endpoint index is not validated and might be manipulated by the host for out-of-array access...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5418-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5418-1 advisory. Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5417-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5417-1 advisory. Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre Variant 2...

The vulnerability of the driver for Xilinx USB devices (drivers/usb/gadget/udc/udc-xilinx.c) in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the driver for Xilinx USB devices drivers/usb/gadget/udc/udc-xilinx.c in Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

OESA-2022-1614 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.CVE-2022-26966 In...

DEBIAN-CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

AZL-9067 CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...