PT-2026-61212

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: copy only received bytes on short ep0 read ffs ep0 read allocates its control-OUT data buffer with kmalloc not kzalloc at the Length value from the Setup packet, then copies that full len to userspace regardles...