CVE-2026-93119 usb: ljca: bound bank_num in ljca_enumerate_gpio()

In the Linux kernel, the following vulnerability has been resolved: usb: ljca: bound banknum in ljcaenumerategpio ljcaenumerategpio reads desc-banknum from the device and loops validpini = getunalignedle32... for i banknum. validpin holds only LJCAMAXGPIONUM / 32 = 2 entries. Two checks run befor...

CVE-2026-93119

CVE-2026-93119 affects the Linux kernel usb: ljca driver. In ljca_enumerate_gpio(), the bank_num field read from the device descriptor is used to loop into the valid_pin[] array, which holds only 2 entries (LJCA_MAX_GPIO_NUM / 32). Existing validation checks (reply-length and pins_per_bank * bank...