CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

EUVD-2026-45730

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

CVE-2026-63957

The CVE-2026-63957 issue affects the Linux kernel USB serial safe_serial implementation. The vulnerability is a memory corruption risk when using a small endpoint, arising from an inadequately sized bulk-out buffer; in safe mode, a malicious device reporting a smaller size could lead to user-cont...

CVE-2026-63957 USB: serial: safe_serial: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

EUVD-2026-45674

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers...

CVE-2026-63901

The CVE-2026-63901 entry describes a memory corruption fix in the Linux kernel USB serial driver for digi_acceleport. The vulnerability stemmed from missing sanity checks on bulk-out buffer sizes, which could allow out-of-bounds memory accesses or slab corruption if a malicious device reported sm...

CVE-2026-53194

In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi105preparewritebuffer is called by the generic write path with the bulk-out buffer and its size bulkoutsize, 64 bytes. It stores a two-byte length header at the start of t...