Поиск уязвимостей
Количество 23
Количество 23
BDU:2025-00231
Уязвимость функции ucsi_ccg_update_set_new_cam_cmd() в модуле drivers/usb/typec/ucsi/ucsi_ccg.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации
CVE-2024-50268
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control()
CVE-2024-50268
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control()
CVE-2024-50268
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control()
CVE-2024-50268
usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
CVE-2024-50268
In the Linux kernel, the following vulnerability has been resolved: u ...
GHSA-rcqh-96hr-hv69
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control()
ROS-20250314-02
Множественные уязвимости kernel-lt
ALT-PU-2024-17891
ALT-PU-2024-17891: package `kernel-image-6.6` update to version 6.6.62-alt1
ALT-PU-2024-16040
ALT-PU-2024-16040: package `kernel-image-un-def` update to version 6.1.119-alt1
ALT-PU-2024-17254
ALT-PU-2024-17254: package `kernel-image-rt` update to version 5.10.231-alt1.rt123
ALT-PU-2024-17099
ALT-PU-2024-17099: package `kernel-image-std-def` update to version 5.10.231-alt1
ALT-PU-2024-17211
ALT-PU-2024-17211: package `kernel-image-pine` update to version 6.12.5-alt1
ELSA-2025-20095
ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2025-12647
ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1
SUSE-SU-2024:4316-1
Security update for the Linux Kernel
SUSE-SU-2024:4376-1
Security update for the Linux Kernel
SUSE-SU-2024:4315-1
Security update for the Linux Kernel
SUSE-SU-2024:4314-1
Security update for the Linux Kernel
ALT-PU-2026-9924
ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00231 Уязвимость функции ucsi_ccg_update_set_new_cam_cmd() в модуле drivers/usb/typec/ucsi/ucsi_ccg.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации | CVSS3: 7.1 | 0% Низкий | около 2 лет назад |
 | CVE-2024-50268 In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control() | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
 | CVE-2024-50268 In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control() | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
 | CVE-2024-50268 In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control() | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
 | CVE-2024-50268 usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
| CVE-2024-50268 In the Linux kernel, the following vulnerability has been resolved: u ... | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
| GHSA-rcqh-96hr-hv69 In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control() | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
 | ROS-20250314-02 Множественные уязвимости kernel-lt | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2024-17891 ALT-PU-2024-17891: package `kernel-image-6.6` update to version 6.6.62-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2024-16040 ALT-PU-2024-16040: package `kernel-image-un-def` update to version 6.1.119-alt1 | CVSS3: 7.8 | почти 2 года назад | |
| ALT-PU-2024-17254 ALT-PU-2024-17254: package `kernel-image-rt` update to version 5.10.231-alt1.rt123 | CVSS3: 7.8 | почти 2 года назад | |
| ALT-PU-2024-17099 ALT-PU-2024-17099: package `kernel-image-std-def` update to version 5.10.231-alt1 | CVSS3: 7.8 | почти 2 года назад | |
| ALT-PU-2024-17211 ALT-PU-2024-17211: package `kernel-image-pine` update to version 6.12.5-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ELSA-2025-20095 ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | почти 2 года назад | ||
| ALT-PU-2025-12647 ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1 | CVSS3: 9.8 | около 1 года назад | |
 | SUSE-SU-2024:4316-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2024:4376-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2024:4315-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2024:4314-1 Security update for the Linux Kernel | почти 2 года назад | ||
| ALT-PU-2026-9924 ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1 | CVSS3: 10 | 5 месяцев назад |
Уязвимостей на страницу