CVE-2026-68344

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect ueaprobe distinguishes a pre-firmware device from a post-firmware one using the USB id UEAISPREFIRM, and stores a different object as the interface data i...

EUVD-2026-55445

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect ueaprobe distinguishes a pre-firmware device from a post-firmware one using the USB id UEAISPREFIRM, and stores a different object as the interface data i...

CVE-2026-68344 usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect ueaprobe distinguishes a pre-firmware device from a post-firmware one using the USB id UEAISPREFIRM, and stores a different object as the interface data i...

CVE-2026-68344

The CVE concerns the Linux kernel USB ATM driver (ueagle-atm). A pre-/post-firmware descriptor mismatch in uea_probe() vs uea_disconnect() allows a crafted device to cause an out-of-bounds access when tracing interface data, due to incorrect handling of interface data (struct completion vs struct...