PT-2026-64565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB idmouse driver due to a race condition between the release and disconnect functions. The problem occurs because mutex unlock may access the mutex...

PT-2026-64568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB gadget composite handler within the composite setup function. When processing the OTG branch, the code attempts to fall back to the first configuration using...

CVE-2026-64528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged 1. When console flow control is enabled UPFCONSFLOW, s3c24xxserialstoptx calls...

PT-2026-64557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the USB serial keyspan pda implementation. The write callback is intended to return the number of characters accepted or a negative errno. However, with wri...

PT-2026-64699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio component where the DualSense jack-detection input handler fails to safely verify if an input device belongs to the same physical controller during...

PT-2026-64562

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB iowarrior driver. The mutex unlock function may access the mutex structure after the lock has been released, meaning it cannot be used to manage...

PT-2026-64556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the digi acceleport USB serial driver where the read USB Request Block URB—a data structure used to manage USB transfers—is not resubmitted if the port is closed while...

PT-2026-64554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the digi acceleport USB serial driver where the digi write inb command function fails to correctly handle timeouts. Instead of returning an error when a write URB USB...

CVE-2026-64333: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the u...

Linux Distros Unpatched Vulnerability : CVE-2026-64335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: digiacceleport: fix broken rx after throttle If the port is closed while throttled, the read urb is never resubmitted and the port will not receive...

CVE-2026-64334: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently e.g if the device is being disconnected the driver would loop indefinitely with interrupts disabled. Check for urb...

PT-2026-64555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hard lockup occurs in the digi acceleport USB serial driver when submitting an Out-of-Band OOB write USB Request Block URB fails persistently, such as during a device disconnection. Th...

PT-2026-64571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the cdnsp alloc stream info function. The function allocates stream info-stream ctx array using cdnsp alloc stream ctx. If a subsequent stream ring allocation or...

PT-2026-64676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The chaoskey driver contains a slab-use-after-free issue within its release routine. This occurs when a user closes the device file after the USB device has been unplugged, causing a...

Linux Distros Unpatched Vulnerability : CVE-2026-64334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: digiacceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently e.g if the device is being disconnected the driver...

Linux Distros Unpatched Vulnerability : CVE-2026-64333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to wait for the write urb to become available or return an error, b...

Linux Distros Unpatched Vulnerability : CVE-2026-64336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition...

Linux Distros Unpatched Vulnerability : CVE-2026-64303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengineprepslavesg fails for the TX channel, the error path terminates the TX DMA...

SUSE CVE-2026-63874

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...

DEBIAN-CVE-2026-64242

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...