-

CVE-2026-63901

USB: serial: digi_acceleport: fix memory corruption with small endpoints

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix memory corruption with small endpoints

Add the missing bulk-out buffer size sanity checks to avoid
out-of-bounds memory accesses or slab corruption should a malicious
device report smaller buffers than expected.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < fd34198c2e5d164b57a7dcd4692626fece319225
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 25b93d0f229a115ab120106f37b9454170d4cfd4
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 6ab1e9ae099577a1019312088309ecbad2da9a91
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 8a65db5edd7b63365e9c5b7d9f4b8f314696dc49
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 41b645e791099f0038225da5e2ca3ca31f00d435
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 062dcc0b324afd03b1406f157190804f105718bb
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9469419b12a100e7e2ccdda64ab45b8368456c8a
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < cb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.134
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fd34198c2e5d164b57a7dcd4692626fece319225
https://git.kernel.org/stable/c/25b93d0f229a115ab120106f37b9454170d4cfd4
https://git.kernel.org/stable/c/6ab1e9ae099577a1019312088309ecbad2da9a91
https://git.kernel.org/stable/c/8a65db5edd7b63365e9c5b7d9f4b8f314696dc49
https://git.kernel.org/stable/c/41b645e791099f0038225da5e2ca3ca31f00d435
https://git.kernel.org/stable/c/062dcc0b324afd03b1406f157190804f105718bb
https://git.kernel.org/stable/c/9469419b12a100e7e2ccdda64ab45b8368456c8a
https://git.kernel.org/stable/c/cb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5