-

CVE-2026-63900

USB: serial: keyspan: fix missing indat transfer sanity check

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: keyspan: fix missing indat transfer sanity check

Add the missing sanity check on the size of usa49wg indat transfers to
avoid parsing stale or uninitialised slab data.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < bd6c5fe59f374b63173afe5cf0ab38a9a370f2c1
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < e124120e89b61a967e40dee6b5e1ecafc45c09d9
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < 41d9673941eebdde62ee73848fcfe4ae1105c979
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < 0bde5431037a076ff3750da2165fd77a6f5ff058
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < 3759a40738b83bb61699c85f063202b514b94f77
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < ea2b792330b44b6d7ce671c3e1d59d0c121f7ed1
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < f7f566ad7519c7ca3bc9071350002940a2b0e22a
Status affected
Version 0ca1268e109acf6d71507398cb95cab2e670b654
Version < ab8336a7e414f018430aa1af3a46944032f7ff96
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 2.6.23
Status affected
Version 0
Version < 2.6.23
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.114
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/bd6c5fe59f374b63173afe5cf0ab38a9a370f2c1
https://git.kernel.org/stable/c/e124120e89b61a967e40dee6b5e1ecafc45c09d9
https://git.kernel.org/stable/c/41d9673941eebdde62ee73848fcfe4ae1105c979
https://git.kernel.org/stable/c/0bde5431037a076ff3750da2165fd77a6f5ff058
https://git.kernel.org/stable/c/3759a40738b83bb61699c85f063202b514b94f77
https://git.kernel.org/stable/c/ea2b792330b44b6d7ce671c3e1d59d0c121f7ed1
https://git.kernel.org/stable/c/f7f566ad7519c7ca3bc9071350002940a2b0e22a
https://git.kernel.org/stable/c/ab8336a7e414f018430aa1af3a46944032f7ff96