Back to overview

CVE-2026-63901

Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers than expected.

Metadata

CVE ID
CVE-2026-63901
State
PUBLISHED
Assigner
Linux
Reserved
2026-07-19 07:54 UTC
Published
2026-07-19 14:55 UTC
Last updated
2026-07-19 14:55 UTC
Vendor / Product
Linux / Linux
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fd34198c2e5d164b57a7dcd4692626fece319225, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 25b93d0f229a115ab120106f37b9454170d4cfd4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6ab1e9ae099577a1019312088309ecbad2da9a91, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8a65db5edd7b63365e9c5b7d9f4b8f314696dc49 …
Linux Linux 2.6.12, 0 < 2.6.12, 5.10.259 ≤ 5.10.*, 5.15.210 ≤ 5.15.* …
Back to overview