Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
Permalink CVE-2026-90034
created 1 week, 3 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion 1 week, 3 days ago
usb: image: mdc800: change kmalloc() to kzalloc()

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: change kmalloc() to kzalloc() Change the kmalloc() calls in usb_mdc800_init() for irq_urb_buffer and download_urb_buffer to kzalloc(), avoiding potential stack leaks if a shorter message is received in mdc800_usb_irq() and mdc800_usb_download_notify()

Affected products

Linux
  • <5.10.270
  • =<6.18.*
  • =<6.1.*
  • <553c375e86a49882e95840565512e17bff31cc3a
  • <6.12.110
  • =<6.12.*
  • <838455cc8bfe1278150d1d776529edea6cd4c1dd
  • =<*
  • <6.1.188
  • <6c601410d1a9ae645f604fe2f61b9f4942c77dfb
  • <8c38049879f2108f57c98f03cc7f3db51a12bdab
  • <2430eb81e44111b30eeb5273bbcf8b24ca517ef9
  • =<5.15.*
  • <6.6.157
  • <6.18.51
  • <7.2.5
  • =<7.2.*
  • <2df8f7720ed91f1aad4f128553b6e90c7c5fac1e
  • <67c6726dd6048a2781aa43a2bf9fcf1e16ee3a7d
  • <5.15.221
  • =<6.6.*
  • <e22428f0c038c23109c0383a235aa607b0cd4c95
  • =<5.10.*