-

CVE-2026-63957

USB: serial: safe_serial: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: safe_serial: fix memory corruption with small endpoint

Make sure that the bulk-out buffer size is at least eight bytes to avoid
user-controlled slab corruption in "safe" mode should a malicious device
report a smaller size.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e3a1d6eee25dc96b1d2db0ecd9d8741e92056476
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < c7336c0fba5c959249f3d793d33076b992ec3ee4
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9b3145b3001fb24de1da72d1deb0bea70e5a078b
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < a550ed2117ca4709d38f713933ff924a83942e41
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < f793b67d41e5fab719c5a90baa77cbd2fe259517
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 857b3cc73f91871ae4433f8b97c4670b78f8dc96
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 438061ed1ad85e6743e2dce826671772d81089ec
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.114
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/e3a1d6eee25dc96b1d2db0ecd9d8741e92056476
https://git.kernel.org/stable/c/c7336c0fba5c959249f3d793d33076b992ec3ee4
https://git.kernel.org/stable/c/161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4
https://git.kernel.org/stable/c/9b3145b3001fb24de1da72d1deb0bea70e5a078b
https://git.kernel.org/stable/c/a550ed2117ca4709d38f713933ff924a83942e41
https://git.kernel.org/stable/c/f793b67d41e5fab719c5a90baa77cbd2fe259517
https://git.kernel.org/stable/c/857b3cc73f91871ae4433f8b97c4670b78f8dc96
https://git.kernel.org/stable/c/438061ed1ad85e6743e2dce826671772d81089ec