EUVD-2026-116533

An authenticated OS command injection vulnerability exists in the Offline Download component USB storage allocation of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly...

CVE-2026-118865

An authenticated OS command injection vulnerability exists in the Offline Download component USB storage allocation of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly...

CVE-2026-118865

An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of the Archer AX3000 v2 . The issue occurs because the software fails to properly neutralize shell metacharacters in a crafted path value before passing it to a system command whe...

CVE-2026-90029

A flaw was found in the Linux kernel's realtekcr USB storage driver. This vulnerability, a use-after-free, occurs when the system attempts to access memory that has already been released. During a USB device disconnection, a timer within the realtekcr module is deleted before its associated...

CVE-2026-116776

USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB flash drives. Prior to version 1.1.5, getSectorSize in USB Test/src/driveinfo.cpp trusts DISKGEOMETRY.BytesPerSector returned by IOCTLDISKGETDRIVEGEOMETRY without checking wheth...

CVE-2026-98771

A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, leaving kernel memory uninitialized. A malicious or emulated...

CVE-2026-93781

A flaw was found in the Linux kernel's SCSI Small Computer System Interface subsystem, which can lead to a Denial of Service DoS. During device error recovery, the error handling mechanism attempts to allocate request tags while all available tags are held by pending commands waiting for recovery...

CVE-2026-90031

A flaw was found in the Linux kernel's usb-storage component, specifically within the eneub6250 driver. A race condition exists between the delayed scan work and the enegetcardtype probe function. This occurs because both operations attempt to use the same Universal Serial Bus USB Request Block U...

CVE-2026-98771

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771 usb: storage: sierra_ms: reject short SWoC info transfers

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771

A vulnerability in the Linux kernel 's usb: storage: sierra_ms driver allows an unprivileged user to disclose up to 5 bytes of stale kernel heap memory . The issue stems from sierra_get_swoc_info() failing to validate that a full 60-byte swoc_info structure was received via usb_control_msg(). Whe...

CVE-2026-98771 usb: storage: sierra_ms: reject short SWoC info transfers

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

Linux Distros Unpatched Vulnerability : CVE-2026-98771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alaudacheckmedia Syzbot caused KMSAN to complain about accessing an uninitialized value within the alauda subdriver of usb-storage: BUG: KMSAN: uninit-value in alaudatransport+0x462/0x57f0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba This issue was discovered by Atuin – the Automated Vulnerability Discovery Engine. newpba is derived from the status packet returned after each write operation. A malicious device...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive locking violation in usb-storage: ============================================ WARNING: possible recursive locking detected 5.18.0 3 Not...

SUSE CVE-2026-98232

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter than its...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...