kernel: ALSA: usb-audio: Stop parsing channels bits when all channels are found.

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. The Linux kernel CVE team has assigned CVE-2024-27436 to this issue. Upstream advisory:...

kernel: usb: typec: ucsi: Limit read size on v1.2

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 The Linux kernel CVE team has assigned CVE-2024-35924 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051914-CVE-2024-35924-90f6@gregkh/T...

kernel: usb: typec: bus: verify partner exists in typec_altmode_attention

A NULL pointer dereference flaw was found in the Linux kernel's USB Type-C subsystem. When certain USB hubs perform a data role swap after entering DisplayPort Alt Mode, all alternate modes are unregistered. If the hub continues sending Attention messages afterward, the typecaltmodeattention...

kernel: usb: gadget: core: Check for unset descriptor

A flaw was found in the USB gadget core component of the Linux kernel. This vulnerability occurs when a USB gadget does not properly set up its endpoint descriptor or provides malformed descriptors. A local attacker with the ability to connect a specially crafted USB gadget could trigger a null...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

PT-2024-8151 · Microsoft · Windows Usb Video Class System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Video Class System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system...

PT-2024-8153 · Microsoft · Windows Usb Video Class Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Video Class Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling the attacker...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and...

CentOS 9 : kernel-5.14.0-527.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-527.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix duplicate endpoint bug by clearing reserved bits in...

openSUSE 15 Security Update : virtualbox (openSUSE-SU-2024:0364-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0364-1 advisory. Update to release 7.1.4: NAT: Fixed DHCP problems with certain guests when domain is empty VMSVGA: Improved flickering, black screen and other...

Huawei EulerOS: Security Advisory for uboot-tools (EulerOS-SA-2024-2896)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2907)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for uboot-tools (EulerOS-SA-2024-2916)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2888)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:0364-1 Security update for virtualbox

This update for virtualbox fixes the following issues: Update to release 7.1.4: NAT: Fixed DHCP problems with certain guests when domain is empty VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels Linux Guest Additions: Introduce initial support for...

SUSE CVE-2024-50239

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenl...