-

CVE-2026-74681

usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg

In the Linux kernel, the following vulnerability has been resolved:

usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg

ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check
in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT
endpoint size.  Both are taken independently from different endpoints
in usbio_probe(), so the check is wrong when they differ.

Use rxbuf_len for the IN direction.  This matches the buffer that
actually holds the response data.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 121a0f839dbb397af5fabb701cea3e9983223e50
Version < ebfd1e82ab0a6d26efd9bdd89de899215851f5bf
Status affected
Version 121a0f839dbb397af5fabb701cea3e9983223e50
Version < 9ad0164f78b66b0b5eca3a5748cc94dd87e28124
Status affected
Version 121a0f839dbb397af5fabb701cea3e9983223e50
Version < 7e22c9f79b200672f3e477421b6c9050d8cf70a5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.18
Status affected
Version 0
Version < 6.18
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.06
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/7e22c9f79b200672f3e477421b6c9050d8cf70a5
https://git.kernel.org/stable/c/9ad0164f78b66b0b5eca3a5748cc94dd87e28124
https://git.kernel.org/stable/c/ebfd1e82ab0a6d26efd9bdd89de899215851f5bf