PT-2026-61278

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB Type-C DisplayPort alternate mode implementation where the kernel fails to validate the count before reading a Status Update VDO Vendor Defined Object. A...

PT-2026-61220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the belkin sa read int callback function within the USB serial driver for Belkin devices. The interrupt callback processes interrupt data as a four-byte status report,...

PT-2026-61217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB serial keyspan driver where a sanity check is missing for the size of usa49wg indat transfers. This omission could lead to the parsing of stale or uninitialize...

PT-2026-61194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs during the initialization of the first serial port in the DECstation DZ serial driver. The issue is caused by a null pointer dereference when the system attempts to access...

PT-2026-61273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the cypress m8 USB serial driver. A malicious device reporting an interrupt-out endpoint max packet size of less than eight bytes can trigger...

PT-2026-61178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtk-snfi SPI driver where the on-host NAND ECC engine is registered during the mtk snand probe function, but the corresponding teardown process is missing from bot...

Linux Distros Unpatched Vulnerability : CVE-2026-53384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port and then, if the device has...

PT-2026-61274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the USB serial safe mode when a malicious device reports a bulk-out buffer size smaller than eight bytes. This can lead to user-controlled slab corruption,...

PT-2026-61223

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the omap2430 probe function. The of node putnp function is called prematurely before the final access to the np variable, which can lead to a...

PT-2026-61193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zs serial driver where a kernel crash occurs during the initialization of the first serial port. The crash is caused by the dereferencing of a pointer derived from...

PT-2026-61137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw88 USB driver, memory leaks occur when the rtw usb write port function fails to submit a USB Request Block URB, such as during device disconnects or memory pressure ENOMEM...

PT-2026-61089

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free hazard exists in the dw8250 probe function. The function registers the 8250 port using serial8250 register 8250 port and subsequently attempts to register a clock notifi...

PT-2026-61215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the mct u232 USB serial driver. The driver overrides the maximum transfer size for a specific device that accepts 16 byte packets for its 32 byte...

PT-2026-61249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mhz19b receive buf function where serial data chunks are appended to the fixed MHZ19B CMD SIZE receive buffer without verifying if the chunk fits in the remaining...

PT-2026-61244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free issue exists in the debug code of the dwc2 USB driver. The problem occurs because the urb object is dereferenced after the usb hcd giveback urb function is called, which...

PT-2026-61216

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the mxuport serial USB driver. A malicious device can trigger user-controlled slab corruption—a type of memory error affecting the slab allocator, whi...

PT-2026-61245

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the USB serial omninet driver when a malicious device reports a smaller endpoint max packet size than expected. This can lead to user-controlled slab...

PT-2026-61276

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb typec tcpm/tcpci maxim component where the system fails to validate the header NDO against RX BYTE CNT. A malicious or malfunctioning port can send a CRC-valid...

PT-2026-61218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the digi acceleport USB serial driver due to missing sanity checks for bulk-out buffer sizes. A malicious device reporting smaller buffers than expected can...

kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()

A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the usbippackretsubmit function by sending a specially crafted RETSUBMIT response. This response, containing an oversized numberofpackets value, could cause a heap out-of-bounds...