CVE-2026-64336

A flaw was found in the Linux kernel's keyspanpda USB serial driver. An issue with the write callback function allows it to report more data written than was actually provided. This can lead to the system writing data beyond its allocated buffer, resulting in an information leak. A local attacker...

SUSE CVE-2026-64336

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...

EUVD-2026-48880

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...

CVE-2026-64336

CVE-2026-64336 affects the Linux kernel USB serial driver keyspan_pda. The information leak arose because the write() callback could report the number of characters submitted to the device when a write URB wasn’t in use, allowing data beyond the tty write buffer to be written. The root cause is t...

CVE-2026-64336 USB: serial: keyspan_pda: fix information leak

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...

CVE-2026-64336

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspanpda implementation will however...

PT-2026-64557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the USB serial keyspan pda implementation. The write callback is intended to return the number of characters accepted or a negative errno. However, with wri...

Linux Distros Unpatched Vulnerability : CVE-2026-64336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: keyspanpda: fix information leak The write callback is supposed to return the number of characters accepted or a negative errno. Since the addition...

CVE-2026-63900

A flaw was found in the Linux kernel's USB Keyspan serial driver. This vulnerability stems from a missing sanity check on the size of incoming data transfers for usa49wg indat transfers. This oversight could allow an attacker to cause the system to parse stale or uninitialized memory, potentially...

SUSE CVE-2026-63900

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

Linux Distros Unpatched Vulnerability : CVE-2026-63900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or...

CVE-2026-63900

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

CVE-2026-63900

CVE-2026-63900 concerns the Linux kernel USB serial driver for Keyspan devices (usa49wg). The vulnerability was a missing sanity check on the size of indat transfers, which could allow parsing of stale or uninitialised slab data. The issue has been addressed by adding the missing sanity check to ...

EUVD-2026-45673

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

CVE-2026-63900

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

CVE-2026-63900 USB: serial: keyspan: fix missing indat transfer sanity check

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data...

PT-2026-61217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB serial keyspan driver where a sanity check is missing for the size of usa49wg indat transfers. This omission could lead to the parsing of stale or uninitialize...

openSUSE 10 Security Update : kernel (kernel-3760)

This kernel update fixes the following security problems : - CVE-2007-1861: The nlfiblookup function in net/ipv4/fibfrontend.c allows attackers to cause a denial of service kernel panic via NETLINKFIBLOOKUP replies, which trigger infinite recursion and a stack overflow. - CVE-2007-1496:...