CVE-2026-90034

A flaw was found in the Linux kernel's USB MDC800 driver. The driver uses kmalloc instead of kzalloc for buffer allocation, which can leave portions of the allocated memory uninitialized. If a shorter message is received, an attacker could potentially read sensitive information from the kernel...