Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4050-1

Опубликовано: 07 сент. 2026
Источник: suse-cvrf

Описание

Security update for libusb-1_0

This update for libusb-1_0 fixes the following issue:

  • CVE-2026-23679: NULL pointer dereference in parse_interface() allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664).

Список пакетов

Container bci/spack:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/kiosk/firefox-esr:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/rmt-server:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro-rancher/5.3:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro-rancher/5.4:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro/5.3/toolbox:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro/5.4/toolbox:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro/5.5/toolbox:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro/5.5:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle-micro/base-5.5:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/sle15:latest
libusb-1_0-0-1.0.24-150400.3.6.1
Image SLES15-SP6-SAP
libusb-1_0-0-1.0.24-150400.3.6.1
Image SLES15-SP6-SAP-Azure
libusb-1_0-0-1.0.24-150400.3.6.1
Image SLES15-SP6-SAPCAL
libusb-1_0-0-1.0.24-150400.3.6.1
Image SLES15-SP6-SAPCAL-Azure
libusb-1_0-0-1.0.24-150400.3.6.1
Image SLES15-SP7-SAPCAL-Azure
libusb-1_0-0-1.0.24-150400.3.6.1
SUSE Linux Enterprise Micro 5.3
libusb-1_0-0-1.0.24-150400.3.6.1
SUSE Linux Enterprise Micro 5.4
libusb-1_0-0-1.0.24-150400.3.6.1
SUSE Linux Enterprise Micro 5.5
libusb-1_0-0-1.0.24-150400.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libusb-1_0-0-1.0.24-150400.3.6.1
libusb-1_0-devel-1.0.24-150400.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
libusb-1_0-0-32bit-1.0.24-150400.3.6.1

Ссылки

Описание

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.

Затронутые продукты
Container bci/spack:latest:libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/kiosk/firefox-esr:latest:libusb-1_0-0-1.0.24-150400.3.6.1
Container suse/rmt-server:latest:libusb-1_0-0-1.0.24-150400.3.6.1
Ссылки