In the Linux kernel, the following vulnerability has been resolved:
usb: early: xhci-dbc: Fix a potential out-of-bound memory access
If xdbc_bulk_write() fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbc_trace() is called.
Reserve an extra byte, which will be zeroed automatically because 'buf' is a static variable, in order to avoid troubles, should it happen.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64 | Jan 12, 2026 | Dec 9, 2025 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-raspiUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-nvidia | Dec 11, 2025 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub