NewStart CGSL MAIN 6.06 (SP) : qemu Multiple Vulnerabilities (NS-SA-2026-0014)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has qemu packages installed that are affected by multiple vulnerabilities: - A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a...

The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xhciwrite64 function in the drivers/usb/host/xhci.h module of the Linux device support driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the oxu_bus_suspend() function in the drivers/usb/host/oxu210hp-hcd.c driver for supporting USB device controllers in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the oxubussuspend function in the drivers/usb/host/oxu210hp-hcd.c file of the Linux device support driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the snd_usbmidiOutputOpen() function in the sound/usb/midi.c module of Linux’s USB audio device support allows a hacker to cause a service failure.

The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which is part of Linux’s USB audio device support, involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a hacker to cause service failures...

The vulnerability in the isp116xremove() function of the drivers/usb/host/isp116x-hcd.c driver module allows a malicious actor to cause a service failure.

The vulnerability of the isp116xremove function in the drivers/usb/host/isp116x-hcd.c file of the Linux kernel’s USB device support driver is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005676 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005804 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3qcomprobe allocates memory for resource...

CVE-2026-20024

creationtimestamp| type| source ---|---|--- 2026-03-04 20:01:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb36nesvn2u...

USN-8070-3: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

ROS-20260304-73-0017

A vulnerability in the usbhsprobe function of the usb component of the Linux operating system kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260304-73-0033

A vulnerability in the sndusbgetaudioformatuac3 sound/usb/stream.c function of the Linux kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005606 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvousbprobe Smatch reports: drivers/usb/phy/phy-tahvo.c...

kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing

A flaw was found in the Linux kernel's USB core configuration parsing. Specifically, the usbparsessendpointcompanion function incorrectly checks the descriptor type before its length, which can lead to reading data beyond the intended buffer. This out-of-bounds read vulnerability could allow a...

kernel: media: rc: fix races with imon_disconnect()

A use-after-free flaw exists in the Linux kernel’s media/rc subsystem. When the device is disconnected via imondisconnect, the driver may unconditionally release a usbdevice reference via usbputdev even while other operations such as vfdwrite, sendpacket, displayopen, lcdwrite are still in...

RHEL 9 : kernel-rt (RHSA-2026:3375)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3375 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005596 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are...

CVE-2026-26699

creationtimestamp| type| source ---|---|--- 2026-03-02 18:10:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3u2d4ws72x...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005553 advisory. In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member uzonesize of struct...

Multiple Apple products have service denial vulnerabilities (CNVD-2026-26097)

Apple iOS is an operating system developed for mobile devices. Apple macOS is a dedicated operating system designed specifically for Mac computers. Apple iPadOS is an operating system used for iPad tablets. Several Apple products have service denial vulnerabilities, and attackers can exploit thes...

Zyxel EX3510-B0 UPnP command injection vulnerability

The Zyxel EX3510-B0 is a Gigabit Ethernet switch produced by Zyxel Technology. The Zyxel EX3510-B0 UPnP device has a command injection vulnerability related to UPnP SOAP requests. This vulnerability stems from incorrect filtering of input parameters, allowing remote attackers to execute arbitrary...