Linux Distros Unpatched Vulnerability : CVE-2026-64345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fprinter: take kref only for successful open printeropen returns -EBUSY when the character device is already open, but it increments dev-kref...

Linux Distros Unpatched Vulnerability : CVE-2026-64505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength,...

Linux Distros Unpatched Vulnerability : CVE-2026-64465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the...

Linux Distros Unpatched Vulnerability : CVE-2026-64351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: kalmia: bound RX frame length in kalmiarxfixup kalmiarxfixup computes usbpacketlength = skb-len - 2 KALMIAHEADERLENGTH as a u16, guarded only by a...

PT-2026-64554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the digi acceleport USB serial driver where the digi write inb command function fails to correctly handle timeouts. Instead of returning an error when a write URB USB...

PT-2026-64548

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffs data got descs generates the eps addrmap which contains the endpoint direction. However, epfile-in was previous...

PT-2026-64675

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend context dwc3 gadget suspend takes dwc-lock with IRQs disabled and then calls dwc3 disconnect gadget. For async callbacks that helper only uses plain spin unlock/spin lock, s...

PT-2026-64550

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccg irq handler calls ucsi notify common, which on a connector-change event calls ucsi connector change and schedules connector work. In ucsi cc...

PT-2026-64556

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi acceleport: fix broken rx after throttle If the port is closed while throttled, the read urb is never resubmitted and the port will not receive any further data until the device is reconnected or the driver is...

PT-2026-64557

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan pda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspan pda implementation will however...

PT-2026-64549

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: Fix DMA fence leak In ffs dmabuf transfer, a ffs dma fence object is kmalloc'd, with the underlying dma fence later initialized by dma fence init, which sets its kref counter to 1. Then, dma resv add fence gets...

PT-2026-64572

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX frame length in kalmia rx fixup kalmia rx fixup computes usb packet length = skb-len - 2 KALMIA HEADER LENGTH as a u16, guarded only by a pre-loop check that skb-len is at least KALMIA HEADER LENGTH,...

PT-2026-64553

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

PT-2026-64569

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehci iso sched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until iso stream schedule and the link...

Linux Distros Unpatched Vulnerability : CVE-2026-64328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: Fix DMA fence leak In ffsdmabuftransfer, a ffsdmafence object is kmalloc'd, with the underlying dmafence later initialized by dmafenceinit,...

Linux Distros Unpatched Vulnerability : CVE-2026-64339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies bpktlen = le16tocpubpkt-len bytes out of the bulk IN buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-64338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: misc: uss720: unregister parport on probe failure uss720probe registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002...

Linux Distros Unpatched Vulnerability : CVE-2026-64350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdnsp: fix stream context array leak in cdnspallocstreaminfo cdnspallocstreaminfo allocates streaminfo-streamctxarray with cdnspallocstreamctx. If a later...

Linux Distros Unpatched Vulnerability : CVE-2026-64337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: mtu3: unmap request DMA on queue failure mtu3gadgetqueue maps the request before checking whether the QMU GPD ring can accept another transfer. the request...

Linux Distros Unpatched Vulnerability : CVE-2026-64347

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: composite: fix dead empty check in the USBDTOTG handler The OTG branch of compositesetup falls back to the first configuration when none is...