Lucene search
K

45 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10, linux

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fixed a bug in the pipe direction for control transfers. The syzbot fuzzer reported a minor bug in the usbtmc driver: usb 5-1: The BOGUS control direction, with pipe 80001e80, does not match bRequestType 0. WARNING:...

7.8CVSS5.8AI score0.00022EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/05/13 3:34 a.m.6 views

SUSE CVE-2026-43429

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for some usbbulkmsg calls. Since the user can specify...

5.8AI score0.00013EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/05/08 11:36 p.m.6 views

CVE-2026-43429

A flaw was found in the Linux kernel's usbtmc driver. A local user can exploit this vulnerability by providing arbitrarily long timeout values through an ioctl command. This can cause the kernel thread to hang indefinitely, leading to a Denial of Service DoS condition. Mitigation To mitigate this...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References4
NVD
NVD
added 2026/05/08 3:16 p.m.6 views

CVE-2026-43429

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for some usbbulkmsg calls. Since the user can specify...

5.5CVSS0.00013EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:22 p.m.4 views

CVE-2026-43429

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for some usbbulkmsg calls. Since the user can specify...

5.8AI score0.00013EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2026/05/08 2:22 p.m.8 views

CVE-2026-43429

CVE-2026-43429 (Linux kernel, USB usbtmc): The vulnerability arises from the usbtmc driver accepting user-specified timeouts that can be arbitrarily long for usb_bulk_msg() calls, potentially causing kernel threads to hang indefinitely. The issue is resolved by using usb_bulk_msg_killable() with ...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2026/05/08 2:22 p.m.27 views

CVE-2026-43429 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for some usbbulkmsg calls. Since the user can specify...

0.00013EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/08 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-43429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.6 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the use of the usbtmc driver to call usbbulkmsg with a timeout value specified by the user. This...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-31758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored URBs must be flushed or killed to prevent use-after-free errors...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.5 views

PT-2026-36393

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free error exists in the usbtmc release function. This occurs because pending anchored URBs USB Request Blocks are not properly flushed or killed, which can lead to memory...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References20
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the usb usbtmc driver not refreshing the anchor URB in usbtmcrelease, which could lead to reuse after releas...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011271 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem ...

6.1AI score0.0004EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012978 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem ...

6.3AI score0.0004EPSS
Exploits0References4
OSV
OSV
added 2026/01/30 1:42 p.m.2 views

SUSE-SU-2026:0350-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50282: chardev: fix error handling in cdevdeviceadd bsc1249739. - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. - CVE-2022-50700:...

7.8CVSS7AI score0.00117EPSS
Exploits2References145
SUSE CVE
SUSE CVE
added 2025/12/09 12:29 a.m.4 views

SUSE CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

7CVSS6.4AI score0.0004EPSS
Exploits0References10
NVD
NVD
added 2025/12/08 2:15 a.m.2 views

CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

0.0004EPSS
Exploits0References6
OSV
OSV
added 2025/12/08 2:15 a.m.1 views

DEBIAN-CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

5.5AI score0.0004EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 2:15 a.m.0 views

UBUNTU-CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

6.2AI score0.0004EPSS
Exploits0References9
CVE
CVE
added 2025/12/08 1:19 a.m.10 views

CVE-2023-53761

The CVE-2023-53761 issue affects the Linux kernel USB usbtmc driver. A 0-length control transfer ioctl could bypass direction checks because the driver did not enforce the OUT direction for bRequestType, enabling a mismatch in control messages traced in usb_submit_urb. The root cause in the patch...

6AI score0.0004EPSS
Exploits0References6
Rows per page
Query Builder