CVE-2026-63901

The Linux kernel contains a memory corruption vulnerability in the USB serial digi_acceleport driver. The issue is caused by missing bulk-out buffer size sanity checks, which can lead to out-of-bounds memory accesses or slab corruption if a malicious device reports smaller buffers than expected. ...

CVE-2026-63901

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers...