SUSE CVE-2026-63897

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data and leaking it to user space...

CVE-2026-63897

The Linux kernel contains a vulnerability in the USB: serial: mct_u232 driver due to a missing sanity check on interrupt-in transfer sizes. This flaw could allow an attacker to parse stale or uninitialized slab data, leading to an information leak to user space. Remediation includes updates such ...