8538 matches found
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
...
CVE-2025-36907
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
...
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.
...
scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
...
usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
...
usb: gadget : fix use-after-free in composite_dev_cleanup()
...
phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
...
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-audio not validating the length of the UAC3 power domain descriptor, which could lead to out-of-bounds...
PT-2025-35890
Name of the Vulnerable Software and Affected Versions: abl affected versions not specified Description: A heap buffer overflow exists in the draw surface image function within abl/android/lib/draw/draw.c. This issue may lead to local escalation of privilege via USB fastboot after a bootloader...
Das U-Boot 2022.01 has a Buffer Overflow.
...
scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
...
CVE-2025-58644
creationtimestamp| type| source ---|---|--- 2025-09-03 17:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx73ov43227 2025-09-03 20:30:05+00:00| seen| https://gist.github.com/Darkcrai86/0925d7b58009b93ea337ddd32ac94ad5...
CVE-2023-21473
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
CVE-2023-21473
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
CVE-2023-21472
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port disable sysfs attribute The Linux kernel CVE team has assigned CVE-2024-26933 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26933-c18d@gregkh/T...
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: CVE-2025-6442: Fixed readheader HTTP Request Smuggling Vulnerability in WEBrick bsc1245254 CVE-2025-27221: Fixed userinfo leakage in URIjoin, URImerge and URI+ bsc1237805 Patch Instructions: To install this SUSE update use the SUSE recommended...
PUB-A-418774137
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...