https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:17:24 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1032 certfr-2025-avi-1032 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1032 https://cve.radiocsirt.org/vuln/euvd-2026-311317 EUVD-2026-311317 https://cve.radiocsirt.org/vuln/euvd-2026-311317 https://cve.radiocsirt.org/vuln/fkie_cve-2022-50568 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: f_hid: fix f_hidg lifetime vs cdev</p> <p>The embedded struct cdev does not have its lifetime correctly tied to the enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN is held open while the gadget is deleted.</p> <p>This can readily be replicated with libusbgx&#39;s example programs (for conciseness - operating directly via configfs is equivalent):</p> <p>gadget-hid exec 3&lt;&gt; /dev/hidg0 gadget-vid-pid-remove exec 3&lt;&amp;-</p> <p>Pull the existing device up in to struct f_hidg and make use of the cdev_device_{add,del}() helpers. This changes the lifetime of the device object to match struct f_hidg, but note that it is still added and deleted at the same time.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: f_hid: fix f_hidg lifetime vs cdev</p> <p>The embedded struct cdev does not have its lifetime correctly tied to the enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN is held open while the gadget is deleted.</p> <p>This can readily be replicated with libusbgx&#39;s example programs (for conciseness - operating directly via configfs is equivalent):</p> <p>gadget-hid exec 3&lt;&gt; /dev/hidg0 gadget-vid-pid-remove exec 3&lt;&amp;-</p> <p>Pull the existing device up in to struct f_hidg and make use of the cdev_device_{add,del}() helpers. This changes the lifetime of the device object to match struct f_hidg, but note that it is still added and deleted at the same time.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-50568 https://cve.radiocsirt.org/vuln/ghsa-4jrv-w6c6-f8r5 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: f_hid: fix f_hidg lifetime vs cdev</p> <p>The embedded struct cdev does not have its lifetime correctly tied to the enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN is held open while the gadget is deleted.</p> <p>This can readily be replicated with libusbgx&#39;s example programs (for conciseness - operating directly via configfs is equivalent):</p> <p>gadget-hid exec 3&lt;&gt; /dev/hidg0 gadget-vid-pid-remove exec 3&lt;&amp;-</p> <p>Pull the existing device up in to struct f_hidg and make use of the cdev_device_{add,del}() helpers. This changes the lifetime of the device object to match struct f_hidg, but note that it is still added and deleted at the same time.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: f_hid: fix f_hidg lifetime vs cdev</p> <p>The embedded struct cdev does not have its lifetime correctly tied to the enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN is held open while the gadget is deleted.</p> <p>This can readily be replicated with libusbgx&#39;s example programs (for conciseness - operating directly via configfs is equivalent):</p> <p>gadget-hid exec 3&lt;&gt; /dev/hidg0 gadget-vid-pid-remove exec 3&lt;&amp;-</p> <p>Pull the existing device up in to struct f_hidg and make use of the cdev_device_{add,del}() helpers. This changes the lifetime of the device object to match struct f_hidg, but note that it is still added and deleted at the same time.</p> https://cve.radiocsirt.org/vuln/ghsa-4jrv-w6c6-f8r5 https://cve.radiocsirt.org/vuln/suse-su-2025:4139-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2025:4139-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-50568 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 156 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: fix f_hidg lifetime vs cdev The embedded struct cdev does not have its lifetime correctly tied to the enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN is held open while the gadget is deleted. This can readily be replicated with libusbgx&#39;s example programs (for conciseness - operating directly via configfs is equivalent): gadget-hid exec 3&lt;&gt; /dev/hidg0 gadget-vid-pid-remove exec 3&lt;&amp;- Pull the existing device up in to struct f_hidg and make use of the cdev_device_{add,del}() helpers. This changes the lifetime of the device object to match struct f_hidg, but note that it is still added and deleted at the same time.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 156 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: fix f_hidg lifetime vs cdev The embedded struct cdev does not have its lifetime correctly tied to the enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN is held open while the gadget is deleted. This can readily be replicated with libusbgx&#39;s example programs (for conciseness - operating directly via configfs is equivalent): gadget-hid exec 3&lt;&gt; /dev/hidg0 gadget-vid-pid-remove exec 3&lt;&amp;- Pull the existing device up in to struct f_hidg and make use of the cdev_device_{add,del}() helpers. This changes the lifetime of the device object to match struct f_hidg, but note that it is still added and deleted at the same time.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-50568 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2394 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2394