https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:48:13 +0000 https://cve.radiocsirt.org/vuln/cve-2025-38497 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: configfs: Fix OOB read on empty string write</p> <p>When writing an empty string to either &#39;qw_sign&#39; or &#39;landingPage&#39; sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length &#39;l&#39; is greater than zero.</p> <p>This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: configfs: Fix OOB read on empty string write</p> <p>When writing an empty string to either &#39;qw_sign&#39; or &#39;landingPage&#39; sysfs attributes, the store functions attempt to access page[l - 1] before validating that the length &#39;l&#39; is greater than zero.</p> <p>This patch fixes the vulnerability by adding a check at the beginning of os_desc_qw_sign_store() and webusb_landingPage_store() to handle the zero-length input case gracefully by returning immediately.</p> https://cve.radiocsirt.org/vuln/cve-2025-38497