Поиск уязвимостей
Количество 31
Количество 31
CVE-2025-38497
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.
CVE-2025-38497
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.
CVE-2025-38497
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.
CVE-2025-38497
usb: gadget: configfs: Fix OOB read on empty string write
CVE-2025-38497
In the Linux kernel, the following vulnerability has been resolved: u ...
GHSA-qhvh-q9v2-923q
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.
BDU:2025-11510
Уязвимость модуля drivers/usb/gadget/configfs.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260317-80-0036
Уязвимость kernel-lt
ROS-20260317-73-0029
Уязвимость kernel-lt
SUSE-SU-2025:02848-1
Security update for the Linux Kernel
SUSE-SU-2025:02849-1
Security update for the Linux Kernel
SUSE-SU-2025:03344-1
Security update for the Linux Kernel
ALT-PU-2025-16598
ALT-PU-2025-16598: package `kernel-image-un-def` update to version 6.1.147-alt1
ELSA-2025-25757
ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-20663
ELSA-2025-20663: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2025:03023-1
Security update for the Linux Kernel
SUSE-SU-2025:02996-1
Security update for the Linux Kernel
SUSE-SU-2025:02969-1
Security update for the Linux Kernel
ALT-PU-2025-16619
ALT-PU-2025-16619: package `kernel-image-rt` update to version 5.10.241-alt1.rt135
ALT-PU-2025-16606
ALT-PU-2025-16606: package `kernel-image-std-def` update to version 5.10.241-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-38497 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately. | CVSS3: 7.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38497 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38497 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately. | CVSS3: 7.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38497 usb: gadget: configfs: Fix OOB read on empty string write | 0% Низкий | около 1 года назад | |
| CVE-2025-38497 In the Linux kernel, the following vulnerability has been resolved: u ... | CVSS3: 7.1 | 0% Низкий | больше 1 года назад |
| GHSA-qhvh-q9v2-923q In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qw_sign' or 'landingPage' sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length 'l' is greater than zero. This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately. | CVSS3: 7.1 | 0% Низкий | больше 1 года назад |
 | BDU:2025-11510 Уязвимость модуля drivers/usb/gadget/configfs.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7 | 0% Низкий | больше 1 года назад |
 | ROS-20260317-80-0036 Уязвимость kernel-lt | CVSS3: 7 | 0% Низкий | 8 месяцев назад |
| ROS-20260317-73-0029 Уязвимость kernel-lt | CVSS3: 7 | 0% Низкий | 8 месяцев назад |
 | SUSE-SU-2025:02848-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02849-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03344-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16598 ALT-PU-2025-16598: package `kernel-image-un-def` update to version 6.1.147-alt1 | CVSS3: 8.4 | больше 1 года назад | |
| ELSA-2025-25757 ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT) | 12 месяцев назад | ||
| ELSA-2025-20663 ELSA-2025-20663: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | ||
| SUSE-SU-2025:03023-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02996-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02969-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16619 ALT-PU-2025-16619: package `kernel-image-rt` update to version 5.10.241-alt1.rt135 | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2025-16606 ALT-PU-2025-16606: package `kernel-image-std-def` update to version 5.10.241-alt1 | CVSS3: 8.1 | около 1 года назад |
Уязвимостей на страницу