Hendrik Schwartke

The update process can be exploited by providing a modified firmware update image, allowing a remote attacker to gain root access to the system.

The issue allows an attacker to bypass intended access restrictions due to incorrect authorization.

The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash, via a crafted USB device without two interrupt-in endpoint descriptors. This is due to a problem in the `mct u232 msr to state` function.

The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash. This is achieved via a crafted `endpoints` value in a USB device descriptor, specifically targeting the `digi port init` function in the Linux kernel.

The issue is related to the iowarrior probe function in the Linux kernel, which contains an error in handling USB device descriptors. This can be exploited by an attacker to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. The exploitation requires physical proximity to the system and involves crafting a specific value in the USB device descriptor.

The issue allows physically proximate attackers to cause a denial of service, potentially leading to a system crash, by inserting a USB device that lacks specific endpoints.

The issue allows physically proximate attackers to cause a denial of service, potentially leading to a system crash, by inserting a USB device that lacks a bulk-out endpoint. This is due to a NULL pointer dereference in the `clie 5 attach` function.

The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash, via a crafted USB device that lacks endpoints. This is due to a problem in the aiptek probe function in drivers/input/tablet/aiptek.c.

A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors.

The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash. This is achieved via a crafted endpoints value in a USB device descriptor, specifically targeting the wacom probe function in drivers/input/tablet/wacom sys.c.