CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...

CVE-2026-63903

The Linux kernel contains a vulnerability in the USB serial belkin_sa driver. The belkin_sa_read_int_callback() function fails to validate the length of interrupt data, treating it as a four-byte status report and reading fields at offsets 2 and 3 without verifying if the actual length is suffici...