CVE-2026-63902 USB: serial: cypress_m8: validate interrupt packet headers

🗓️ 19 Jul 2026 14:55:10Reported by LinuxType

Linux kernel fix validates Cypress M8 USB serial interrupt headers to prevent out-of-bounds reads.

Reporter	Title	Published	Views	Family All 22
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-124 (ALASKERNEL-5.10-2026-124)	8 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0895	26 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0926	24 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63902	20 Jul 202600:00	–	nessus
CVE	CVE-2026-63902	19 Jul 202614:55	–	cve
Debian CVE	CVE-2026-63902	19 Jul 202614:55	–	debiancve
EUVD	EUVD-2026-45675	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63902	19 Jul 202616:17	–	nvd
OSV	BELL-CVE-2026-63902	22 Jul 202606:04	–	osv
OSV	DEBIAN-CVE-2026-63902	19 Jul 202616:17	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/serial/cypress_m8.c"
    ],
    "versions": [
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "fcef31a5a85ccf3c313449a866ec6ed7e4132425",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "aaa66708bfb1dca2acd219d1c1582f9f6d5492cb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "44f9bab8df7750a1e2a4d6cc22d7c9c2dc096aed",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "be50533fe7068e86eb7adb81988e6d6a3f6dfe53",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "90664556916de22467097d4c8ceb716d597a5c32",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "ae03453f2c809ca3cf73753269fa6184dea7160f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "4a4cb0021ebe1fcadb52e04d19ed8d71470a530b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3416eaa1f8f8d516b77de514e14cf8da256d28fb",
        "lessThan": "9f9bfc80c67f35a275820da7e83a35dface08281",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/serial/cypress_m8.c"
    ],
    "versions": [
      {
        "version": "2.6.26",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.26",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.35",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.12",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/4a4cb0021ebe1fcadb52e04d19ed8d71470a530b
git	www.git.kernel.org/stable/c/be50533fe7068e86eb7adb81988e6d6a3f6dfe53
git	www.git.kernel.org/stable/c/9f9bfc80c67f35a275820da7e83a35dface08281
git	www.git.kernel.org/stable/c/90664556916de22467097d4c8ceb716d597a5c32
git	www.git.kernel.org/stable/c/44f9bab8df7750a1e2a4d6cc22d7c9c2dc096aed
git	www.git.kernel.org/stable/c/ae03453f2c809ca3cf73753269fa6184dea7160f
git	www.git.kernel.org/stable/c/fcef31a5a85ccf3c313449a866ec6ed7e4132425
git	www.git.kernel.org/stable/c/aaa66708bfb1dca2acd219d1c1582f9f6d5492cb

19 Jul 2026 14:55Current

EPSS0.00211