SUSE CVE-2026-63898

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

CVE-2026-63957

The Linux kernel contains a memory corruption vulnerability within the USB serial safe_serial component. The issue arises when a malicious device reports a small endpoint size, leading to a user-controlled slab corruption if the bulk-out buffer size is less than eight bytes. This vulnerability is...

CVE-2026-63956

The Linux kernel contains a memory corruption vulnerability in the USB serial cypress_m8 driver. The issue occurs when a malicious device reports an interrupt-out endpoint max packet size of less than eight bytes, which can lead to a user-controlled slab corruption or a NULL-pointer dereference ....

CVE-2026-63956 USB: serial: cypress_m8: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

CVE-2026-63928 USB: serial: omninet: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

EUVD-2026-45672

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size...

CVE-2026-63898

The Linux kernel contains a memory corruption vulnerability in the USB serial subsystem, specifically within the mct_u232 driver. The issue arises because the driver overrides the maximum transfer size for a device that only accepts 16-byte packets on its 32-byte bulk-out endpoint. A malicious de...

CVE-2026-63898 USB: serial: mct_u232: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

CVE-2026-63898 USB: serial: mct_u232: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

CVE-2026-63928: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a...

PT-2026-61274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the USB serial safe mode when a malicious device reports a bulk-out buffer size smaller than eight bytes. This can lead to user-controlled slab corruption,...