CVE-2026-63902 USB: serial: cypress_m8: validate interrupt packet headers

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: validate interrupt packet headers cypressreadintcallback parses the interrupt-in buffer according to the selected Cypress packet format. Format 1 has a two-byte status/count header and format 2 has a...

CVE-2026-63902

The Linux kernel is vulnerable to an out-of-bounds read in the usb-serial driver within the cypress_m8 component. The cypress_read_int_callback() function fails to sufficiently validate interrupt packet headers when parsing buffers for specific Cypress packet formats. Specifically, the buffer is ...