CVE-2026-11009

An use after free flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496233132...

CVE-2026-9976

Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

MiracleLinux 8 : virt:rhel (AXSA:2020-911:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-911:01 advisory. QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 QEMU: slirp: networking out-of-bounds read information disclosu...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003101 advisory. drivers/net/can/usb/gsusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cau...

CVE-2021-3682

A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free with faked heap chunk...

Design/Logic Flaw

A flaw was found in the USB redirector device usb-redir of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array VLA on the stack...

Debian Security Advisory DSA 3396-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service. CVE-2015-5307Ben Serebrin from Google discovered a guest to host denial of service flaw affecting the KVM hypervisor. A malicious guest can trigger an infinite stream of alignment check AC...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

Security fixes : - Kernel update 2.6.9-89.EL introduced a flaw in the ptrace implementation on Itanium systems. ptracecheckattach was not called during certain ptrace requests. Under certain circumstances, a local, unprivileged user could use this flaw to call ptrace on a process they do not own,...