CVE-2026-80827

CVE-2026-80827 affects the Linux kernel's USB serial option driver (usb-serial-option). The interrupt URB buffer is allocated in setup_port_interrupt_in() using the endpoint's wMaxPacketSize via kmalloc(). When a USB device declares wMaxPacketSize = 8, the buffer is exactly 8 bytes. If the device...