Linuxsecurity SUSE libusb-1_0 NULL Pointer Vulnerability Advisory
Article Content
- •CVE-2026-23679 allows application crashes via malformed USB descriptors.
- •Affected systems include openSUSE Leap 15.4 and SUSE Linux Enterprise Micro.
- •Patches are available and should be applied immediately.
A NULL pointer dereference vulnerability (CVE-2026-23679) has been identified in libusb-1_0, affecting multiple SUSE Linux distributions. This flaw allows attackers to crash applications by providing malformed USB configuration descriptors. The vulnerability has a moderate severity rating with a CVSS score of 4.0. Affected systems include openSUSE Leap 15.4 and SUSE Linux Enterprise Micro versions 5.3 and 5.4. Users are advised to apply the available patches immediately to mitigate any risks. The vulnerability was published on May 27, 2026, and is now addressed with patch SUSE-2026-4050. The advisory emphasizes the importance of keeping systems updated to prevent exploitation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2026-23679 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…