Lucene search
+L

29 matches found

RedhatCVE
RedhatCVE
•added 2026/10/13 3:05 p.m.•10 views

CVE-2026-90282

A flaw was found in the Linux kernel's qcom qmp-usb-legacy driver. This vulnerability occurs due to a NULL-dereference during an early runtime suspend operation or when a local user re-enables runtime power management via the sysfs attribute before the physical layer PHY is properly initialized...

5.5CVSS5.8AI score0.002EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/09/18 12:18 a.m.•14 views

SUSE CVE-2026-90282

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

4.7CVSS5.8AI score0.002EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-90282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after...

6AI score0.002EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/17 5:17 p.m.•18 views

DEBIAN-CVE-2026-90282

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

6.1AI score0.002EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/09/17 5:17 p.m.•18 views

AZL-102852 CVE-2026-90282 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

5.8AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 5:17 p.m.•14 views

CVE-2026-90282

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/17 4:08 p.m.•19 views

EUVD-2026-81875

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

5.9AI score0.002EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/17 4:08 p.m.•24 views

CVE-2026-90282

CVE-2026-90282 affects the QCOM QMP USB legacy PHY driver in the Linux kernel. The root cause is a NULL pointer dereference of qmp->phy when the runtime suspend callback executes in a narrow window between pm_runtime_enable() and pm_runtime_forbid(), before the PHY pointer is initialized. The ...

5.8AI score0.002EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/17 4:08 p.m.•50 views

CVE-2026-90282 phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

0.002EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/09/17 4:08 p.m.•16 views

CVE-2026-90282 phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

5.8AI score0.002EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•9 views

CVE-2026-90282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because...

5.9AI score0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•10 views

PT-2026-94630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb-legacy component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm...

5.7AI score0.002EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/20 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-43422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: legacy: ncm: Fix NPE in gncmbind Commit 56a512a9b410 usb: gadget: fncm: align netdevice...

5.7AI score0.00121EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/08 11:20 p.m.•22 views

CVE-2026-43422

A flaw was found in the Linux kernel's USB legacy NCM Network Control Model driver. This vulnerability occurs due to a NULL pointer dereference in the gncmbind function, where the driver attempts to access a network device netdevice before it has been fully initialized. An attacker could...

5.4AI score0.00121EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/08 2:21 p.m.•37 views

CVE-2026-43422

The CVE-2026-43422 entry concerns the Linux kernel USB legacy NCM driver. The vulnerability stems from deferred net_device allocation in gncm_bind, where a NULL pointer dereference could occur when accessing the net_device before it is fully instantiated. The fix, described in the connected repor...

5.7AI score0.00121EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•28 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability arises from the USB Legacy NCM driver, which delays the allocation of netdevice in gncmbind, and fail...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/07/03 12:00 a.m.•18 views

Linux kernel DoS

The vulnerability of the drivers/phy/qualcomm/phy-qcom-qmp-usb-legacy.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00206EPSS
SaveExploits0References7Affected Software4
SUSE CVE
SUSE CVE
•added 2024/11/10 3:49 a.m.•12 views

SUSE CVE-2024-50239

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenl...

5.5CVSS7.6AI score0.00206EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2024/11/09 11:15 a.m.•19 views

AZL-53301 CVE-2024-50239 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenl...

5.5CVSS6.8AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/09 11:15 a.m.•28 views

CVE-2024-50239

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenl...

5.5CVSS0.00206EPSS
SaveExploits0References3
Rows per page
Query Builder