CVE-2026-23307 can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message

🗓️ 25 Mar 2026 10:27:02Reported by GoogleType

osv

osv🔗 osv.dev

Linux kernel fix for ems_usb_read_bulk_callback length checks to prevent buffer overflow.

Reporter	Title	Published	Views	Family All 51
ATTACKERKB	CVE-2026-23307	25 Mar 202610:27	–	attackerkb
CBLMariner	CVE-2026-23307 affecting package kernel for versions less than 6.6.130.1-1	30 Mar 202616:12	–	cbl_mariner
Circl	CVE-2026-23307	29 Mar 202617:00	–	circl
CNNVD	Linux kernel 安全漏洞	25 Mar 202600:00	–	cnnvd
CVE	CVE-2026-23307	25 Mar 202610:27	–	cve
Cvelist	CVE-2026-23307 can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message	25 Mar 202610:27	–	cvelist
Debian	[SECURITY] [DLA 4561-1] linux-6.1 security update	2 May 202608:40	–	debian
Debian	[SECURITY] [DLA 4606-1] linux security update	29 May 202616:36	–	debian
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian	[SECURITY] [DSA 6243-1] linux security update	1 May 202619:10	–	debian

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/1818974e1b5ef200e27f144c8cb8a246420bb54d
git	www.git.kernel.org/stable/c/18f75b9cbdc3703f15965425ab69dee509b07785
git	www.git.kernel.org/stable/c/1cf469026d4a2308eaa91d04dca4a900d07a5c2e
git	www.git.kernel.org/stable/c/2833e13e2b099546abf5d40a483b4eb04ddd1f7b
git	www.git.kernel.org/stable/c/38a01c9700b0dcafe97dfa9dc7531bf4a245deff
git	www.git.kernel.org/stable/c/c703bbf8e9b4947e111c88d2ed09236a6772a471
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23307.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23307

04 Jun 2026 09:14Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5

EPSS0.00031

Linux kernel ems usb callback length checks buffer overflow