CVE-2026-64351

CVE-2026-64351 affects the Linux kernel USB Kalmia driver (kalmia_rx_fixup). The bug computes usb_packet_length as skb->len - (2 * KALMIA_HEADER_LENGTH) without ensuring both framing headers are present on every loop iteration. This can allow a short bulk-IN frame to underflow usb_packet_lengt...