969 matches found
CVE-2026-74458
Summary: CVE-2026-74458 affects the Linux kernel can: kvaser_usb_leaf code. The flaw allowed dispatch of variable-length USB commands when a nonzero command shorter than CMD_HEADER_LEN was received; a matching command could be copied into a caller-owned kvaser_cmd using the device-provided length...
CVE-2026-74459
CVE-2026-74459 (Linux kernel) affects the can: etas_es58x driver, specifically es58x_read_bulk_callback(). When RX URB resubmission fails (usb_submit_urb()), the callback currently does not release the allocated coherent transfer buffer, causing a buffer leak. The fixes documented in multiple sou...
CVE-2026-74455 can: peak_usb: validate uCAN receive record lengths
In the Linux kernel, the following vulnerability has been resolved: can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying...
CVE-2026-74455
In the Linux kernel, the following vulnerability has been resolved: can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying...
CVE-2026-72403
Summary: CVE-2026-72403 concerns the Linux kernel ALSA FCP USB handling. A malformed vendor-specific USB interface with no endpoint descriptors can cause a NULL pointer dereference in fcp_find_fc_interface() when it incorrectly reads endpoint 0 from the first vendor-specific interface without ver...
EUVD-2026-59037
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unbound. However, it currently relies on the interface class to distinguish...
CVE-2026-72078 Input: ims-pcu - validate control endpoint type
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint...
CVE-2026-72078 Input: ims-pcu - validate control endpoint type
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint...
CVE-2026-72078
CVE-2026-72078 affects the Linux kernel’s ims-pcu driver. The vulnerability arises because the driver assumes the first control-endpoint is an interrupt IN endpoint without verification, which a malicious USB device could exploit by presenting a different endpoint type. This could cause the endpo...
CVE-2026-72076
Summary (CVE-2026-72076): In the Linux kernel driver for ims-pcu, a debugging print in ims_pcu_irq() could read beyond the buffer. When an interrupt was for pcu->urb_ctrl, the actual data lives in pcu->urb_ctrl_buf, but the code unconditionally printed from pcu->urb_in_buf. If urb->ac...
CVE-2026-68456
CVE-2026-68456 affects the Linux kernel USB device ueagle-atm (atm/UEAGLE) where ueagle-atm uses request_firmware_nowait() in .probe() but does not wait for completion in .disconnect(), allowing a race when the device is unplugged during teardown. The advisory states this can interact with the fi...
Linux Distros Unpatched Vulnerability : CVE-2026-74456
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and t...
Linux Distros Unpatched Vulnerability : CVE-2026-74460
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in t...
PT-2026-72737
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc mtk intr urb error path When btmtk isopkt pad fails, the previously allocated URB is not freed, leaking the urb structure. Add usb free urb before returning the error...
Linux Distros Unpatched Vulnerability : CVE-2026-74459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: etases58x: es58xreadbulkcallback: fix RX buffer leak on URB resubmit failure es58xreadbulkcallback resubmits the RX URB after processing a received packet...
Linux Distros Unpatched Vulnerability : CVE-2026-74458
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A...
The vulnerability in the `usb/asix_common.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the usb/asixcommon.c component in the Linux operating system is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-61926
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...
