CVE-2026-72483 usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()

🗓️ 15 Aug 2026 05:57:20Reported by LinuxType

Shift-out-of-bounds in max3421_hub_control() causes undefined behavior and port_status corruption in Linux kernel USB host driver.

Reporter	Title	Published	Views	Family All 65
AstraLinux	Astra Linux – vulnerability in linux-6.1	2 Nov 202614:28	–	astralinux
BDU FSTEC	Linux kernel max3421_hub_control() function Heap Buffer Overflow	12 Oct 202600:00	–	bdu_fstec
CVE	CVE-2026-72483	15 Aug 202605:57	–	cve
Debian CVE	CVE-2026-72483	15 Aug 202605:57	–	debiancve
EUVD	EUVD-2026-59382	15 Aug 202605:57	–	euvd
NVD	CVE-2026-72483	15 Aug 202606:22	–	nvd
osv_bell	BELL-CVE-2026-72483	18 Aug 202606:06	–	osv_bell
osv_debian	DEBIAN-CVE-2026-72483	15 Aug 202606:22	–	osv_debian
osv_suse	SUSE-SU-2026:5091-1 Security update for the Linux Kernel	3 Nov 202616:27	–	osv_suse
osv_ubuntu	UBUNTU-CVE-2026-72483	15 Aug 202606:22	–	osv_ubuntu

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/host/max3421-hcd.c"
    ],
    "versions": [
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "e5fa9d8f40746ec3447335c9642c03410f5fd3af",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "08b1d4cab0230697bc74c63fc4e40170a7559c54",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "3be5f24e8270ba53b3c814d13689bb8644c86237",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "d512bdefd241b98f4d7bcb5bab5614a86411fad4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "00dd025324b56d39d37e57a08f473dab3a660f30",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "02d03c61e8a7b016956acb48e8a2512d16d87517",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "4da073d57176d8e1c2bca34febfbc81d2560c1a5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2d53139f31626bad6f8983d8e519ddde2cbba921",
        "lessThan": "cff06b03b530ae1fe8a13e93a7848f2130e00fb4",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/host/max3421-hcd.c"
    ],
    "versions": [
      {
        "version": "3.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.16",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.261",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.212",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.178",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.97",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.40",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/4da073d57176d8e1c2bca34febfbc81d2560c1a5
git	www.git.kernel.org/stable/c/3be5f24e8270ba53b3c814d13689bb8644c86237
git	www.git.kernel.org/stable/c/08b1d4cab0230697bc74c63fc4e40170a7559c54
git	www.git.kernel.org/stable/c/e5fa9d8f40746ec3447335c9642c03410f5fd3af
git	www.git.kernel.org/stable/c/02d03c61e8a7b016956acb48e8a2512d16d87517
git	www.git.kernel.org/stable/c/d512bdefd241b98f4d7bcb5bab5614a86411fad4
git	www.git.kernel.org/stable/c/00dd025324b56d39d37e57a08f473dab3a660f30
git	www.git.kernel.org/stable/c/cff06b03b530ae1fe8a13e93a7848f2130e00fb4

17 Aug 2026 05:44Current

CVSS 3.17.8

EPSS0.00194