21 matches found
Linux kernel USB Device DoS
The vulnerability in the usa49wgindatcallback function within the drivers/usb/serial/keyspan.c file of the Linux kernel USB device driver is related to access to an uninitialized pointer. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
CVE-2026-64336
A flaw was found in the Linux kernel's keyspanpda USB serial driver. An issue with the write callback function allows it to report more data written than was actually provided. This can lead to the system writing data beyond its allocated buffer, resulting in an information leak. A local attacker...
SUSE CVE-2026-64336
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...
CVE-2026-64336
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...
EUVD-2026-48880
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...
CVE-2026-64336
CVE-2026-64336 affects the keyspan_pda USB serial driver in the Linux kernel. The root cause is an incorrect return value in the write() callback: when the write URB is not in use, keyspan_pda_write_start() returned the number of characters submitted to the device rather than the number accepted....
CVE-2026-64336 USB: serial: keyspan_pda: fix information leak
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...
Linux Distros Unpatched Vulnerability : CVE-2026-64336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the...
PT-2026-64557
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the USB serial keyspan pda implementation. The write callback is intended to return the number of characters accepted or a negative errno. However, with wri...
CVE-2026-63900
A flaw was found in the Linux kernel's USB Keyspan serial driver. This vulnerability stems from a missing sanity check on the size of incoming data transfers for usa49wg indat transfers. This oversight could allow an attacker to cause the system to parse stale or uninitialized memory, potentially...
SUSE CVE-2026-63900
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
Linux Distros Unpatched Vulnerability : CVE-2026-63900
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or...
CVE-2026-63900
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
CVE-2026-63900
A vulnerability exists in the Linux kernel within the USB serial keyspan driver. The issue is caused by a missing sanity check on the size of usa49wg indat transfers , which could lead to the parsing of stale or uninitialized slab data . This flaw impacts the USB serial subsystem. Impacting syste...
CVE-2026-63900
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
EUVD-2026-45673
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
CVE-2026-63900: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...
PT-2026-61217
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB serial keyspan driver where a sanity check is missing for the size of usa49wg indat transfers. This omission could lead to the parsing of stale or uninitialize...