CVE-2025-71094 net: usb: asix: validate PHY address before use

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

CVE-2026-22212

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razerattrreaddpistages, potentially bypassing KASLR. To exploit this vulnerability an attacker would...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000533 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000364 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000222 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000462 advisory. In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000335 advisory. An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000259 advisory. In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaserusb/kvaserusbleaf.c driver, a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000467 advisory. In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000264 advisory. In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka...

PT-2026-8196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Realtek r8152 USB network adapter can trigger a device reset during the reset process, potentially leading to a deadlock. This occurs because the rtl8152 resume function calls reset...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from mishandling of the m920xi2cxfer error in media: dvb-usb: m920x, which could lead to a memory leak...

CVE-2022-50767 fbdev: smscufx: Fix several use-after-free bugs

In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: Fix several use-after-free bugs Several types of UAFs can occur when physically removing a USB device. Adds ufxopsdestroy function to .fbdestroy of fbops, and in this function, there is krefput that finally calls...

CVE-2022-50767

Technical details for CVE-2022-50767 are not publicly available in the provided documents. Monitor for updates from vendors and advisories to learn affected products, impact, and fixes.

SUSE CVE-2025-68342

In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing data The URB received in gsusbreceivebulkcallback contains a struct gshostframe. The length of the data after the header depends on the gshostframe hf::fla...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from multiple post-release reuse vulnerabilities when physically removing a USB device...

AZL-72871 CVE-2025-68331 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer When a UAS device is unplugged during data transfer, there is a probability of a system panic occurring. The root cause is an access to ...