CVE-2026-63904 usb: usbtmc: check URB actual_length for interrupt-IN notifications

🗓️ 19 Jul 2026 14:55:11Reported by LinuxType

Linux kernel Universal Serial Bus Test and Measurement Class driver validates request block length for interrupt input and resubmits when headers are missing.

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2026-63904	19 Jul 202614:55	–	cve
EUVD	EUVD-2026-45677	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63904	19 Jul 202616:17	–	nvd
OSV	CVE-2026-63904 usb: usbtmc: check URB actual_length for interrupt-IN notifications	19 Jul 202614:55	–	osv
OSV	DEBIAN-CVE-2026-63904	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63904	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61221	19 Jul 202600:00	–	ptsecurity

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/class/usbtmc.c"
    ],
    "versions": [
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "e794bd67b3faf98af46f958897f6b91412c7d2a9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "e3eec3005de44e7f37d8d7724be636446516ab42",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "ae87f505917e703ae3b487d9663d78826ff43608",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "5de7df75ef3a2756b25fe3d582a4a2970444fe5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "69020fa089f1bf0e1a10a15265f31b143a846409",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "75f6d3da2cc646983f41807ef98851569c12bca9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "f141b01eaa58ac7e323931d670318aa247bff087",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbf3e7f654c0f06a932b8fcafac78de9d0b81d68",
        "lessThan": "52f2ad3f7e5eb3b5908e1d685d4342519dc9cfcd",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/class/usbtmc.c"
    ],
    "versions": [
      {
        "version": "4.6",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.6",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.35",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.12",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/e794bd67b3faf98af46f958897f6b91412c7d2a9
git	www.git.kernel.org/stable/c/69020fa089f1bf0e1a10a15265f31b143a846409
git	www.git.kernel.org/stable/c/75f6d3da2cc646983f41807ef98851569c12bca9
git	www.git.kernel.org/stable/c/5de7df75ef3a2756b25fe3d582a4a2970444fe5a
git	www.git.kernel.org/stable/c/52f2ad3f7e5eb3b5908e1d685d4342519dc9cfcd
git	www.git.kernel.org/stable/c/ae87f505917e703ae3b487d9663d78826ff43608
git	www.git.kernel.org/stable/c/e3eec3005de44e7f37d8d7724be636446516ab42
git	www.git.kernel.org/stable/c/f141b01eaa58ac7e323931d670318aa247bff087

19 Jul 2026 14:55Current