CVE-2023-52938 usb: typec: ucsi: Don't attempt to resume the ports before they exist

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

CVE-2025-21877

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelinkbind Syzbot reports 1 a warning in usbsubmiturb triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelinkbind does not properly...

PT-2025-13283 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak bug has been identified in the Linux kernel, specifically in the ufx usb probe function. The error handling code in this function has several issues, including missing uf...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from spusbphyprobe null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an attempt by the usb typec ucsi component to restore a port before port registration, resulting in a null...

PT-2025-13298 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential null pointer dereference issue has been identified in the Linux kernel, specifically in the sp usb phy probe function. This function calls platform get resource byname, whi...

The vulnerability of the Linux operating system’s kernel USB component, which allows a hacker to trigger a service failure

The vulnerability of the usbtmccreateurb function in the Linux kernel USB component is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the xhci kernel component in the Linux operating system allows a hacker to increase their privileges within the system.

The vulnerability of the xhci kernel component in Linux operating systems is related to errors that occur after release. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 41 Update: golang-github-openprinting-ipp-usb-0.9.30-1.fc41

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol...

CLSA-2025-1742806909 kernel: Fix of 37 CVEs

HID: core: zero-initialize the report buffer CVE-2024-50302 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - bus: mhi: host: Add alignment check for event ring read pointer CVE-2023-52494 - net: sched: fix ets qdisc OOB Indexing CVE-2025-21692 - parport: Proper fix for...

CVE-2025-26500

: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...

CVE-2025-26500 VxWorks 7 USB Failure

: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...

CVE-2025-26500 VxWorks 7 USB Failure

: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...

CVE-2025-26500

CVE-2025-26500 affects Wind River VxWorks 7 (versions 22.06–24.03). The issue is an Uncontrolled Resource Consumption (Excessive Allocation) caused by specially crafted USB packets that can render the system unavailable. Affected component: USB handling within VxWorks 7; root cause described as e...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238729...

Wind River Systems VxWorks 安全漏洞

Wind River Systems VxWorks is an embedded real-time operating system from Wind River Systems USA. It is used in communications, military, aerospace, and other real-time demanding applications. A security vulnerability exists in Wind River Systems VxWorks 7 versions 22.06 through 24.03, which stem...

The vulnerability of the svdm_consume_identity() function in the drivers/usb/typec/tcpm/tcpm.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the svdmconsumeidentity function in the drivers/usb/typec/tcpm/tcpm.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56629)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56629 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name...

Multiple vulnerabilities in home gateway HGW-BL1500HM

Overview Home gateway HGW-BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. Stored cross-site scripting in the NickName registration screen CWE-79 - CVE-2025-27567 Stored cross-site scripting in the USB storage file-sharing function CWE-79 - CVE-2025-27574 Path...