ROS-20260414-73-0036

A vulnerability in the az6007i2cxfer function of the drivers/media/usb/dvb-usb-v2/az6007.c module of the USB multimedia device driver of the Linux kernel is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

zr364xx.c Heap Buffer Overflow DoS

Vulnerability of the zr364xxstartreadpipe function in the drivers/media/usb/zr364xx/zr364xx.c module – The Linux kernel’s multimedia device driver has a vulnerability related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an...

CVE-2023-34283

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-34283

CVE-2023-34283 — NETGEAR RAX30 USB Share Link Information Disclosure : The issue arises from how the router handles symbolic links on removable USB media. By creating a symbolic link, a physically present attacker can abuse the router’s web server to access arbitrary local files, revealing sensit...

GSD-2022-1002108 media: usb: go7007: s2250-board: fix leak in probe()

media: usb: go7007: s2250-board: fix leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

PT-2025-8181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A leak in the probe function of the s2250-board in the go7007 USB media driver has been fixed. The issue is resolved by calling i2c unregister deviceaudio on the error path...

New USBCulprit Espionage Tool Steals Data From Air-Gapped Computers

A Chinese threat actor has developed new capabilities to target air-gapped systems in an attempt to exfiltrate sensitive data for espionage, according to a newly published research by Kaspersky yesterday. The APT, known as Cycldek, Goblin Panda, or Conimes, employs an extensive toolset for latera...

Cycldek: Bridging the (air) gap

Key findings While investigating attacks related to a group named Cycldek post 2018, we were able to uncover various pieces of information on its activities that were not known thus far. In this blog post we aim to bridge the knowledge gap on this group and provide a more thorough insight into it...