-

CVE-2026-63897

USB: serial: mct_u232: fix missing interrupt-in transfer sanity check

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: mct_u232: fix missing interrupt-in transfer sanity check

Add the missing sanity check on the size of interrupt-in transfers to
avoid parsing stale or uninitialised slab data (and leaking it to user
space).
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 82b48d70bced1ec8e5f676d1fd5eccc7a44dc418
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 8b93ee5baeef6efabee2c3381907733ad2dbc883
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < a093f3e0c03d25a86d747a655d4b9322ffb2ed87
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 70bb9a2661d34b93a9b83cf83e2b76289a712ef0
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 631b8b7c456567f7a8d26f6fc354c8dd9cc9f832
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < f06bcaba29707f060706483b2020d3cafbe98f9f
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < ed260b56bc9fc878e5dcbb866eab8af0688e0e67
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 245aba83e3c288e176ed037a1f6b618b09e92ed8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.114
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/82b48d70bced1ec8e5f676d1fd5eccc7a44dc418
https://git.kernel.org/stable/c/8b93ee5baeef6efabee2c3381907733ad2dbc883
https://git.kernel.org/stable/c/a093f3e0c03d25a86d747a655d4b9322ffb2ed87
https://git.kernel.org/stable/c/70bb9a2661d34b93a9b83cf83e2b76289a712ef0
https://git.kernel.org/stable/c/631b8b7c456567f7a8d26f6fc354c8dd9cc9f832
https://git.kernel.org/stable/c/f06bcaba29707f060706483b2020d3cafbe98f9f
https://git.kernel.org/stable/c/ed260b56bc9fc878e5dcbb866eab8af0688e0e67
https://git.kernel.org/stable/c/245aba83e3c288e176ed037a1f6b618b09e92ed8