CVE-2026-98771 usb: storage: sierra_ms: reject short SWoC info transfers

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771 usb: storage: sierra_ms: reject short SWoC info transfers

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771

A vulnerability in the Linux kernel 's usb: storage: sierra_ms driver allows an unprivileged user to disclose up to 5 bytes of stale kernel heap memory . The issue stems from sierra_get_swoc_info() failing to validate that a full 60-byte swoc_info structure was received via usb_control_msg(). Whe...

CVE-2026-98771: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.27 has a security vulnerability. This vulnerability arises from the use of sierragetswocinfo, which requests 60-byte SWoC information through usbcontrolmsg. It does not reject short transmissions, resulting in the newly allocated swocinfo buffer being uninitialized at...

PT-2026-128565

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierra ms: reject short SWoC info transfers sierra get swoc info requests sizeofstruct swoc info 60 bytes from the device via usb control msg, but its callers only treat a negative return value as failure. A device...