Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: usb:dwc2: Fixed a memory leak in dwc2hcdinit usbcreatehcd will allocate memory for hcd, and we should call usbputhcd to free that memory when platformgetresource fails, thereby preventing the memory leak. To fix this issue, chang...

The vulnerability of the _dwc2_hcd_urb_dequeue() function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053311)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053311 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100558 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100129 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

SUSE CVE-2026-63927

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usbhcdgivebackurb so save the urb-status ahead of time...

Linux Distros Unpatched Vulnerability : CVE-2026-63927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling usbhcdgivebackurb so save the urb-status ahead of time...

CVE-2026-63927

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usbhcdgivebackurb so save the urb-status ahead of time...

CVE-2026-63927

In the Linux kernel, the usb: dwc2 use-after-free in debug code has been fixed. The issue occurred from dereferencing urb after usb_hcd_giveback_urb(); the patch saves urb->status ahead of time to avoid use-after-free. Affected component: dwc2 host controller debug path. Impact described in so...

CVE-2026-63927 usb: dwc2: Fix use after free in debug code

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usbhcdgivebackurb so save the urb-status ahead of time...

CVE-2026-63927 usb: dwc2: Fix use after free in debug code

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usbhcdgivebackurb so save the urb-status ahead of time...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013316 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: host: Fix dereference issue in DDMA completion flow. Fixed variable dereference issue ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992569 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989363 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: check return value after calling platformgetresource It will cause null-ptr-deref if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986354 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2hcdinit usbcreatehcd will alloc memory for hcd, and we should...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986545 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: check return value after calling platformgetresource It will cause null-ptr-deref if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986895 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: check return value after calling platformgetresource It will cause null-ptr-deref if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986430 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: check return value after calling platformgetresource It will cause null-ptr-deref if...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-393980)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393980 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In...

Linux Distros Unpatched Vulnerability : CVE-2021-47409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: dwc2: check return value after calling platformgetresource It will cause null-ptr-deref if platformgetresource returns NULL, we need check the return value...