SUSE CVE-2022-48838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a use-after-free bug: BUG: KASAN: use-after-free in devuevent+0x712/0x780 drivers/base/core.c:2320 Read of size 8 at addr ffff88802b934098 ...

UBUNTU-CVE-2022-48838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a use-after-free bug: BUG: KASAN: use-after-free in devuevent+0x712/0x780 drivers/base/core.c:2320 Read of size 8 at addr ffff88802b934098 ...

PT-2024-14590 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel has a vulnerability in the HID: logitech-hidpp module, which can cause a kernel crash when a receiver is disconnected via USB. The issue arises from four time-of-check...

kernel: USB: gadget: Fix use-after-free Read in usb_udc_uevent()

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usbudcuevent The syzbot fuzzer found a race between uevent callbacks and gadget driver unregistration that can cause a use-after-free bug:...

PT-2022-33266 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.7 Description: A potential security issue exists due to a use-after-free read in the usb udc uevent function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2025-25906

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc4-next-20220628-syzkaller Description A use-after-free bug was found in the Linux kernel, specifically in the usb udc uevent function. This bug occurs due to a race between uevent callbacks and gadget...

SuSE 10 Security Update : multipath-tools (ZYPP Patch Number 6083)

Default permissions on the multipathd socket file were to generous and allowed any user to connect. CVE-2009-0115 This update also contains the following fixes : - Error checking in VECTORXXX defines. bnc469269 - Correct definition of dbgmalloc - Double free on path release - Use noflush for...