CVE-2025-5828 Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to...

CVE-2025-5828 Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to...

CVE-2025-5828

The CVE-2025-5828 entry concerns Autel MaxiCharger AC Wallbox Commercial with a wLength buffer overflow in USB frame packet handling. The root cause is a lack of validation of the length of user-supplied data before copying to a fixed-length buffer, enabling arbitrary code execution in the device...

SUSE-SU-2025:02101-1 Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122231 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

SUSE-SU-2025:02098-1 Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059198 fixes one issue. The following security issue was fixed: - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238730...

USN-7595-1 linux, linux-aws, linux-aws-6.8, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122219 fixes several issues. The following security issues were fixed: CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing bsc1233708...

Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122225 fixes several issues. The following security issues were fixed: CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing bsc1233708...

PT-2025-28877

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw in the snd usb get audioformat uac3 function within the ALSA subsystem. The function directly uses a length value received from a USB device for memory...

The vulnerability of the smsc75xx_bind() function in the drivers/net/usb/smsc75xx.c file allows a hacker to cause a service failure. This vulnerability relates to Linux kernel-based USB network adapters.

The vulnerability of the smsc75xxbind function in the drivers/net/usb/smsc75xx.c file, which is related to Linux kernel USB network adapters, stems from the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the smsc75xx_bind() function in the drivers/net/usb/smsc75xx.c module – The driver for supporting USB network adapters in Linux kernels allows a hacker to gain access to protected information.

Vulnerability of the smsc75xxbind function in the drivers/net/usb/smsc75xx.c module – The Linux USB network adapter driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability can allow attackers to gain access to protected information...

Vulnerability of the mcba_usb_start() function in the drivers/net/can/usb/mcba_usb.c module – The Linux kernel’s CAN network device support driver allows a hacker to cause a service failure.

Vulnerability of the mcbausbstart function in the drivers/net/can/usb/mcbausb.c module – The Linux kernel’s CAN network device driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Vulnerability of the ecmbind() function in the drivers/usb/gadget/function/f_ecm.c module – The USB gadget driver of the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the ecmbind function in the drivers/usb/gadget/function/fecm.c module – The Linux kernel’s USB gadget support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cause service failures...

Vulnerability of the dwc3_wIndex_to_dep() function in the drivers/usb/dwc3/ep0.c module – The USB device driver support module in the Linux kernel allows a hacker to trigger a service failure.

Vulnerability of the dwc3wIndextodep function in the drivers/usb/dwc3/ep0.c module – The Linux kernel’s USB device support driver relies on the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cfusbl_create() function in the net/caif/caif_usb.c module, which is part of the Linux kernel’s networking functions, allows a hacker to gain access to protected information.

The vulnerability of the cfusblcreate function in the net/caif/caifusb.c module, which implements kernel networking functions in the Linux operating system, is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability may allow an attacker ...

Vulnerability of the usb_charger_get_property() function in the drivers/usb/common/usb-conn-gpio.c module – The driver for supporting USB devices in Linux kernels allows a hacker to cause a service failure.

Vulnerability of the usbchargergetproperty function in the drivers/usb/common/usb-conn-gpio.c module – The Linux kernel’s USB device support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the zr364xx_start_readpipe() function in the drivers/media/usb/zr364xx/zr364xx.c file – This driver provides support for multimedia devices in the Linux operating system. It can be exploited by attackers to cause service failures.

Vulnerability of the zr364xxstartreadpipe function in the drivers/media/usb/zr364xx/zr364xx.c module – The Linux kernel’s multimedia device driver has a vulnerability related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an...

The vulnerability of the usb_stream_free() function in the sound/usb/usx2y/usb_stream.c module allows a hacker to cause a service failure for USB audio devices in Linux operating systems.

The vulnerability of the usbstreamfree function in the sound/usb/usx2y/usbstream.c module, which handles USB audio devices in Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-38010

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking The current implementation uses biaspadenable as a reference count to manage the shared bias pad for all UTMI PHYs. However, during system suspension with connecte...

CVE-2022-49936

In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive locking violation in usb-storage: ============================================ WARNING: possible recursive locking detected 5.18.0 3 Not...